Agent Skills › mereyabdenbekuly-ctrl/clodex-ide › open-code-review

open-code-review

GitHub

集成阿里Open Code Review工具，通过ocr CLI对代码变更或工作区进行扫描与审查。支持PR、安全及回归检查，输出结构化问题报告并辅助修复高置信度缺陷。

apps/browser/bundled/plugins/open-code-review/SKILL.md mereyabdenbekuly-ctrl/clodex-ide

触发场景

请求AI代码审查 PR review 安全审查 bug风险检查回归检查运行alibaba/open-code-review

安装

npx skills add mereyabdenbekuly-ctrl/clodex-ide --skill open-code-review -g -y

更多选项

非标准路径

npx skills add https://github.com/mereyabdenbekuly-ctrl/clodex-ide/tree/main/apps/browser/bundled/plugins/open-code-review -g -y

不安装直接使用

npx skills use mereyabdenbekuly-ctrl/clodex-ide@open-code-review

指定 Agent (Claude Code)

npx skills add mereyabdenbekuly-ctrl/clodex-ide --skill open-code-review -a claude-code -g -y

安装 repo 全部 skill

npx skills add mereyabdenbekuly-ctrl/clodex-ide --all -g -y

预览 repo 内 skill

npx skills add mereyabdenbekuly-ctrl/clodex-ide --list

SKILL.md

Frontmatter

{
    "name": "open-code-review",
    "description": "Use Alibaba Open Code Review (`ocr`) to review git diffs, staged changes, branches, or scan a workspace, then summarize findings and optionally fix high-confidence issues."
}

Open Code Review Plugin

Use this skill when the user asks for an AI code review, PR review, security review, bug-risk review, regression check, or asks to run alibaba/open-code-review.

This plugin integrates Alibaba Open Code Review through its local CLI command ocr. It should run inside the mounted workspace, never against unrelated directories.

Prerequisites

First check whether the CLI exists:

ocr --version

If ocr is missing, tell the user to install Alibaba Open Code Review from https://github.com/alibaba/open-code-review and stop. Do not fabricate review results.

Review Modes

Prefer the narrowest review that matches the request:

# Review current working-tree changes.
ocr review

# Review staged changes only.
ocr review --staged

# Review changes against a base branch.
ocr review --base main

# Machine-readable output for agent post-processing.
ocr review --format json --audience agent

# Broader workspace scan when the user asks for a full audit.
ocr scan --format json --audience agent

If the repository's default branch is not obvious, inspect git first:

git rev-parse --show-toplevel
git branch --show-current
git remote show origin

Workflow

Confirm the workspace is a git repository.
Inspect the change scope with git status --short and, when useful, git diff --stat.
Run ocr review --format json --audience agent for changed files, or ocr scan --format json --audience agent for an explicit full audit.
Parse the JSON when possible. If the command only returns text, summarize the text faithfully.
Report findings ordered by severity, with file paths and line numbers when available.
If the user asks to fix findings, use normal Clodex edit tools so changes become Pending Edits for user review.

Output Style

Lead with actionable findings. Keep summaries short.

Use this shape:

Found N issue(s).

- [High] path/to/file.ts:42 — Issue title.
  Impact: ...
  Fix: ...

No high-confidence issues found.

When no issues are found, say that clearly and mention the reviewed scope.

Guardrails

Do not apply OCR suggestions blindly. Verify every proposed fix against the code.
Do not hide uncertain findings. Mark them as "Needs verification".
Do not show internal mount prefixes like w48b2/; use project-relative paths.
Do not run full scans unless the user asks for a broad audit, because they can be slow and token-heavy.