skill-review
Use when reviewing Codex, Qoder, or repo-local skills and their prompt chains for trigger quality, workflow clarity, progressive disclosure, duplica…
它会碰到什么
这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。
技能内容
Skill Review
Review a skill as an execution contract, not as prose. Trace how an agent would
enter, load, delegate, produce artifacts, and verify results; then report the
smallest changes that would improve that chain.
Review Workflow
- Resolve the target skill or prompt chain. If the user names a path, stay on
that path and its directly linked resources.
- Read repo instructions first: nearest
AGENTS.md, plugin manifests, and the
target SKILL.md frontmatter/body.
- Trace the chain from entrypoint to references, templates, scripts, detectors,
tests, generated artifacts, and validation commands. Build an ownership map:
what file owns workflow, output structure, runtime rules, style, and tests.
- Audit the contract before editing. Use [Audit Checklist](references/audit-checklist.md)
and [Reference Patterns](references/reference-patterns.md) as lenses.
- If the user asked for changes, patch only the smallest owning files. Keep
generated helpers, smoke scripts, and local experiments outside SKILL.md
unless they are durable resources the skill must use.
- Validate with the lightest real gate available: skill validator, repo tests,
plugin validation, or a bounded agent smoke. State any gate that could not be
run.
Use subagents only as an evaluation surface or for independent broad research.
The lead agent owns the review, final calibration, and file edits. Pass raw
artifacts and task-local scope to subagents; do not pass the intended answer.
Review Lenses
- [Audit Checklist](references/audit-checklist.md): trigger contract, progressive
disclosure, workflow/delegation, template ownership, readability, evidence.
- [Reference Patterns](references/reference-patterns.md): reusable design lenses
such as Trigger/Protocol split, Gate Function, and Output Contract Slots.
- [Fast Inspection Commands](references/inspection-commands.md): starting
rg,
wc, and git diff --check probes adapted to the repo.
Finding Severity
- P0: The skill points to missing, empty, contradictory, or invalid resources;
an agent can follow the instructions and fail.
- P1: The skill works but wastes context, duplicates ownership, hides key
constraints, or produces unreadable output.
- P2: Style, naming, wording, or organization issues that reduce scanability
without breaking the workflow.
Report Shape
Lead with findings, ordered by severity. Keep each finding concrete:
P1 - <short title>
File: <path>:<line>
Why it matters: <execution or output risk>
Evidence: <quoted phrase, command result, or linked resource>
Fix: <smallest owning-file change>
Validation: <command or smoke that should prove it>
After findings, add open questions only when they block a safe change. If the
user asked for edits, include changed files and validation results after the
findings. Default to the user's language.
想直接用这个技能?
本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。