eo-ability-code-review

代码审查能力,调用CodeReviewer专家进行安全、性能、风格全面审查,输出问题列表和改进建议

3,891 stars

Best use case

eo-ability-code-review is best used when you need a repeatable AI agent workflow instead of a one-off prompt.

代码审查能力,调用CodeReviewer专家进行安全、性能、风格全面审查,输出问题列表和改进建议

Teams using eo-ability-code-review should expect a more consistent output, faster repeated execution, less prompt rewriting.

When to use this skill

  • You want a reusable workflow that can be run more than once with consistent structure.

When not to use this skill

  • You only need a quick one-off answer and do not need a reusable workflow.
  • You cannot install or maintain the underlying files, dependencies, or repository context.

Installation

Claude Code / Cursor / Codex

$curl -o ~/.claude/skills/eo-ability-code-review/SKILL.md --create-dirs "https://raw.githubusercontent.com/openclaw/skills/main/skills/467718584/eo-ability-code-review/SKILL.md"

Manual Installation

  1. Download SKILL.md from GitHub
  2. Place it in .claude/skills/eo-ability-code-review/SKILL.md inside your project
  3. Restart your AI agent — it will auto-discover the skill

How eo-ability-code-review Compares

Feature / Agenteo-ability-code-reviewStandard Approach
Platform SupportNot specifiedLimited / Varies
Context Awareness High Baseline
Installation ComplexityUnknownN/A

Frequently Asked Questions

What does this skill do?

代码审查能力,调用CodeReviewer专家进行安全、性能、风格全面审查,输出问题列表和改进建议

Where can I find the source code?

You can find the source code on GitHub using the link provided at the top of the page.

Related Guides

SKILL.md Source

# eo-ability-code-review

> 代码审查能力 - 调用 CodeReviewer 专家进行安全、性能、风格全面审查

## 一句话介绍

调用CodeReviewer专家进行代码安全/性能/风格全面审查,输出问题列表和改进建议。

## 核心功能

- **安全审查**: SQL注入、XSS、CSRF等安全漏洞检测
- **性能审查**: N+1查询、索引缺失、缓存策略等性能问题
- **风格审查**: 代码规范、命名规范、注释完整性
- **综合评分**: 安全/性能/风格/总体四维评分

## 使用方法

```bash
# 全面审查
/code-review /path/to/code --scope all

# 安全审查
/code-review /path/to/code --scope security --rules strict

# 性能审查
/code-review /path/to/code --scope performance
```

## 与EO插件的协同

- 被 eo-workflow-blog 调用(代码质量把关)
- 被 eo-workflow-paper 调用(论文逻辑审查)
- 被 eo-workflow-security-audit 调用(安全漏洞发现)

## 独立运行模式(有EO vs 无EO)

| 模式 | 能力 |
|------|------|
| **有EO插件** | 141专家库(CodeReviewer专家)、真实漏洞检测、重构建议 |
| **无插件(基础)** | LLM代码审查、通用规范检查 |

## 示例

```
🔍 代码审查报告

## 评分
| 维度 | 评分 | 等级 |
|------|------|------|
| 安全 | 85/100 | B+ |
| 性能 | 78/100 | B |
| 风格 | 92/100 | A- |
| **总体** | **85/100** | **B+** |

## 问题列表

### 🔴 高优先级 (3)
1. [安全] SQL 注入风险 - user input directly in query
2. [安全] XSS 漏洞 - 未转义用户输入
3. [性能] N+1 查询问题 - loop 内查询数据库

### 🟡 中优先级 (5)
1. [风格] 变量命名不规范
2. [性能] 缺少索引

## 建议
- 使用参数化查询防止 SQL 注入
- 添加输入验证和转义
- 使用 ORM 的 eager loading
```

## Interface

### Input

```typescript
interface CodeReviewInput {
  codePath: string                // 代码路径
  scope?: 'security' | 'performance' | 'style' | 'all'
  rules?: 'strict' | 'normal' | 'loose'
  language?: string               // 编程语言
}
```

### Output

```typescript
interface CodeReviewOutput {
  scores: {
    security: number            // 0-100
    performance: number         // 0-100
    style: number               // 0-100
    overall: number             // 0-100
  }
  issues: CodeIssue[]
  suggestions: string[]
  summary: string
}
```

---

*🦞⚙️ 钢铁龙虾军团*

Related Skills

Post-Mortem & Incident Review Framework

3891
from openclaw/skills

Run structured post-mortems that actually prevent repeat failures. Blameless analysis, root cause identification, and action tracking.

DevOps & Infrastructure

Pitch Deck Reviewer

3891
from openclaw/skills

Reviews pitch decks and provides investor-ready feedback with scoring

Business Strategy & Growth

Performance Review Engine

3891
from openclaw/skills

> Your AI-powered performance management system. Write reviews that develop people, not just evaluate them. From self-assessments to 360° feedback to calibration — complete frameworks for every review cycle.

Workflow & Productivity

afrexai-observability-engine

3891
from openclaw/skills

Complete observability & reliability engineering system. Use when designing monitoring, implementing structured logging, setting up distributed tracing, building alerting systems, creating SLO/SLI frameworks, running incident response, conducting post-mortems, or auditing system reliability. Covers all three pillars (logs/metrics/traces), alert design, dashboard architecture, on-call operations, chaos engineering, and cost optimization.

ESG & Sustainability Reporting Framework

3891
from openclaw/skills

You are an ESG reporting specialist. Generate comprehensive Environmental, Social, and Governance reports aligned with 2026 disclosure standards.

Workflow & Productivity

Deal Desk — Structured Deal Review & Approval

3891
from openclaw/skills

Run every non-standard deal through a repeatable review process. Catch margin leaks, enforce discount guardrails, and close faster with pre-approved terms.

Contract Review Assistant

3891
from openclaw/skills

Analyze business contracts for risks, unfavorable terms, and missing clauses. Get a plain-English summary of what you're signing.

Legal & Finance

afrexai-code-reviewer

3891
from openclaw/skills

Enterprise-grade code review agent. Reviews PRs, diffs, or code files for security vulnerabilities, performance issues, error handling gaps, architecture smells, and test coverage. Works with any language, any repo, no dependencies required.

Coding & Development

Agent Observability & Monitoring

3891
from openclaw/skills

Score, monitor, and troubleshoot AI agent fleets in production. Built for ops teams running 1-100+ agents.

stability-ai

3891
from openclaw/skills

Generate high-quality images via Stability AI API (SDXL, SD3, Stable Image Core). Use when user asks to "generate image", "make a picture", or "draw this".

Content & Documentation

performance-review-cn

3891
from openclaw/skills

绩效面谈报告、OKR对齐度检测、校准辅助

Workflow & Productivity

clawdtm-review

3891
from openclaw/skills

Review and rate OpenClaw skills on ClawdTM. See what humans and AI agents recommend.

General Utilities