跳到主要内容
知仓学习社ZHICANG

review

Run a standard Claude Code review of local git changes in this repository. Args: --wait, --background, --base <ref>, --scope <auto|working-tree|bran…

不碰外部(只输出文字)无严重或高危命中hashgraph-online/awesome-codex-plugins

它会碰到什么

扫了多少2 个文本文件,13 KB
它会碰到什么不碰外部(只输出文字)
命中总数0 处
命中统计严重 0 · 高 0 · 中 0 · 低 0

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Claude Code Review

Use this skill when the user wants Claude Code to review the current working tree or a branch diff in this repository.

Use $cc:review as the default when the user asks for code review, asks you to have Claude review something, or wants a second review pass without explicitly asking for stronger adversarial scrutiny.

If the user asks for stronger challenge on design, tradeoffs, rollout risk, migration risk, configuration behavior, or provides custom review focus text, route to $cc:adversarial-review instead.

If the user wants Claude Code to investigate, validate by changing code, or actually fix/implement something, route to $cc:rescue instead.

If the overall request is "you review it too, also ask Claude to review in the background, then you aggregate and fix it", keep the delegated Claude part on $cc:review unless the user explicitly asks for a harsher or more adversarial review.

$cc:review does not accept custom focus text. If the user wants to steer Claude toward a particular angle, question, subsystem, or risk area, that is a signal to use $cc:adversarial-review instead.

Resolve <plugin-root> as two directories above this SKILL.md file. Always run the companion from that active plugin root:

node "<plugin-root>/scripts/claude-companion.mjs" review ...

Supported arguments: --wait, --background, --base <ref>, --scope auto|working-tree|branch, --model <model>, --effort <low|medium|high|xhigh|max> (defaults: model=opus and no effort; fable, opus, sonnet, and haiku each keep Claude Code's own effort default, and Claude Code owns which effort levels each model supports)

Forward --model unchanged to the companion. The companion trims surrounding whitespace, canonicalizes the friendly aliases fable, opus, sonnet, and haiku to lowercase, then forwards every other --model value unchanged to Claude Code. Claude Code owns alias resolution and supported effort levels; /model is the authoritative picker for the current account and provider.

Raw slash-command arguments:

$ARGUMENTS

Rules:

  • This skill is review-only. Do not fix issues, apply patches, or suggest that you are about to make changes.
  • Before launching the review, stay in read-only inspection mode: inspect git status and diff stats only, then ask at most one user question about whether to wait or run in background.
  • Preserve the user's review scope flags exactly.
  • Do not accept staged-only or unstaged-only review modes.
  • Do not add extra review instructions or focus text. Route those requests to $cc:adversarial-review.

Execution mode rules:

  • If the raw arguments include --wait, do not ask. Run the review in the foreground.
  • If the raw arguments include --background, do not ask. Run the review in background through the built-in review subagent path.
  • Otherwise, estimate the review size before asking:
  • For working-tree review, start with git status --short --untracked-files=all.
  • For working-tree review, also inspect both git diff --shortstat --cached and git diff --shortstat.
  • For base-branch review, use git diff --shortstat <base>...HEAD.
  • Treat untracked files or directories as reviewable work even when git diff --shortstat is empty.
  • Only conclude there is nothing to review when the relevant working-tree status is empty or the explicit branch diff is empty.
  • Recommend waiting only when the review is clearly tiny, roughly 1-2 files total and no sign of a broader directory-sized change.
  • In every other case, including unclear size, recommend background.
  • When in doubt, run the review instead of declaring that there is nothing to review.
  • Then ask the user once which execution mode to use, offering two options with the recommended one first and its label suffixed (Recommended):
  • Wait for results
  • Run in background
  • Use a question tool for that ask only when this thread actually has one. Codex exposes request_user_input by default in interactive threads and hides it only when [tools] experimental_request_user_input = false, and it does not exist in non-interactive threads. If you have no question tool but a user is reading this thread, ask in your own reply and stop there. In a non-interactive thread with no user to answer, skip the ask and proceed with the recommended mode. Never spin on a wait or collaboration tool looking for a picker this thread does not have.

Argument handling:

  • Preserve the user's arguments exactly.
  • Treat --wait and --background as Codex-side execution controls only. Strip them before calling the companion command.
  • $cc:review is native-review only. It does not support staged-only review, unstaged-only review, or extra focus text.
  • If the user needs custom review instructions or more adversarial framing, they should use $cc:adversarial-review.
  • The companion review process itself always runs in the foreground. Background mode only changes how Codex launches that command.
  • For the detailed execution contract, treat the internal runtime reference at ../../internal-skills/review-runtime/runtime.md as supporting guidance only. It is an internal reference document, not a public skill to invoke.

Foreground flow:

  • Run:

node "<plugin-root>/scripts/claude-companion.mjs" review --view-state on-success <arguments with --wait/--background removed>

  • Run that companion command with sandbox_permissions: "require_escalated" and the justification Allow the Claude Code companion to contact the Claude API for this requested review. Do not first try the companion command in the default network-disabled sandbox.
  • Foreground review belongs to the main Codex thread. Do not spawn a review subagent, do not invoke a generic review-runner role, and do not proxy this foreground path through any background worker abstraction.
  • Do not fall back to raw claude, claude-code, claude review, bash -lc ...claude..., or any other direct Claude CLI syntax when the companion path is available. The foreground syntax contract here is the resolved companion command above, not a hand-rolled Claude invocation.
  • If the resolved companion command fails, surface that failure. Do not silently retry foreground review through a different CLI shape, a generic review runner, or a custom shell wrapper.
  • Present the companion stdout faithfully.
  • Do not fix anything mentioned in the review output.

Background flow:

  • For background review, use Codex's built-in default subagent instead of a detached background shell command.
  • Do not satisfy background review by using a generic claude_review_runner-style helper role, raw Claude CLI, or any other review executor that bypasses the resolved companion command.
  • Never satisfy background review by running the companion command itself with shell backgrounding such as &, nohup, detached spawn, or any equivalent direct background process launch.
  • Background here means "spawn the forwarding child via spawn_agent and do not wait in the parent turn." The companion review command inside that child still runs once, in the foreground, inside the child thread.
  • Before spawning the built-in child, capture the review job id plus routing context in one call:

node "<plugin-root>/scripts/claude-companion.mjs" background-routing-context --kind review --json

  • If that helper returns a non-empty jobId, pass it into the companion command as an internal --job-id <reserved-job-id> routing flag.
  • Whenever forwarding that reserved --job-id, also pass --cwd <workspace-root> using workspaceRoot from the same helper response. Reserved job ids are workspace-scoped.
  • If that helper returns a non-empty ownerSessionId, include --owner-session-id <owner-session-id> in the companion command.
  • If it returns an empty ownerSessionId, omit --owner-session-id entirely. Never leave an empty placeholder such as --owner-session-id --job-id.
  • If that helper returns a non-empty parentThreadId, pass it into the child prompt as the parent thread id for one-shot completion notification.
  • If it returns an empty parentThreadId, omit the notification path instead of emitting a blank thread-id placeholder.
  • Spawn exactly one transient forwarding child through spawn_agent with:
  • fork_context: false
  • reasoning_effort: "medium"
  • no agent_type and no model, so the child uses the built-in default agent and inherits the parent model. Never pin a specific Codex model name here; the available catalog is owned by the host CLI and changes between releases.
  • Prefer a self-contained child message over inheriting parent history. The built-in review child should not rely on full parent thread replay for normal operation.
  • Only consider fork_context: true as a last resort for a short follow-up where essential context truly cannot be summarized. Avoid it for large or long-lived threads because it can exhaust the child context window.
  • Before spawning the built-in child, emit one short commentary update that clearly says the parent is starting the built-in review child on the inherited model at medium effort.
  • The built-in child must be a pure forwarder. It should:
  • run exactly one shell command
  • execute:

node "<plugin-root>/scripts/claude-companion.mjs" review --view-state defer <arguments with --wait/--background removed>

  • run that command as one blocking foreground shell-tool call, not as a background terminal/session
  • do not request a shell session id, poll a shell session later, or return before the companion command exits
  • if the available shell tool is exec_command, call it once in non-interactive mode and wait for command exit in that same call
  • when using exec_command, pass sandbox_permissions: "require_escalated" and the justification Allow the Claude Code companion to contact the Claude API for this requested review. on that one call; do not first try the companion command in the default network-disabled sandbox
  • include --owner-session-id <owner-session-id> only when the parent resolved a non-empty owner session id
  • include --job-id <reserved-job-id> when the parent reserved one
  • include the matching --cwd <workspace-root> whenever the command includes that reserved --job-id
  • never leave an empty routing placeholder such as --owner-session-id --job-id
  • return only that command's stdout exactly, with no added commentary
  • ignore stderr progress chatter such as [cc] ... lines and preserve only the final stdout-equivalent result text
  • not inspect the repo or perform the review itself
  • if a parent thread id is available, allow one extra send_input call after a successful shell result and before finishing
  • the child prompt must mention the tool name send_input literally; do not replace it with a vague instruction like "send a message to the parent"
  • that send_input call must target the provided parent thread id, must happen at most once, and must not run on failure paths
  • that send_input call should use the exact tool shape send_input({ target: <parent-thread-id>, message: <steering-message> }) with no extra prose payload
  • if the parent provided a non-empty parent thread id, do not silently drop the completion notification path from the child prompt
  • if a reserved review job id is available, use this exact notification message:

Background Claude Code review finished. Open it with $cc:result <reserved-job-id>.

  • otherwise fall back to:

Background Claude Code review finished. Inspect it with $cc:status first, then use $cc:result for the finished job you want to open.

  • that send_input message should use one of those exact steering messages instead of inlining the raw review result
  • use these steering messages instead of embedding the raw review result in the notification
  • do not embed the raw Claude result inside the notification message
  • do not include any other prose in that notification message
  • use that same steering message as the child's own final assistant message instead of echoing the raw review result
  • Do not wait for completion in this turn.
  • After launching, tell the user: Claude Code review started in the background. Check the subagent session or $cc:status for progress, and once it's done, we will let you know to see the results.
  • Do not fix anything mentioned in the review output.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

同名技能的其他版本

有 5 个不同仓库或目录里都有叫 review 的技能。它们内容并不相同,别混用: