code-quality-review
Skill1 starsChanged 2 months agoMITView on GitHub
对当前分支、提交或 PR 的变更执行极严格的代码质量与可维护性审查,重点识别结构退化、意外复杂度、散落条件分支、错误抽象、类型或边界污染和超大文件,并寻找在不改变行为的前提下大幅删减复杂度的“代码柔道”方案。用户要求“核爆级代码审查”“最严格可维护性审查”“深度代码质量审计”“thermo-nuclear review”或明确希望挑战实现结构时使用;不要用于只检查格式或仅做安全审计。
23 other projects use a version of this.
Adopted by
Most recently taken up by
- AthenDrakomin-hub/agent-skillstheir own version, first seen Nov 1, 2026
- damacus/agent-skillstheir own version, first seen Nov 1, 2026
- NovruzAliyevDev/skillstheir own version, first seen Nov 1, 2026
- jellydn/my-ai-toolstheir own version, first seen Oct 18, 2026
- VersoXBT/claude-recommended-skillstheir own version, first seen Oct 15, 2026
- paiml/aprendertheir own version, first seen Oct 8, 2026
Used with
Projects with it also use dependency-cve-sweep, fleet-standard-adoption and 6 more.
Other files people use alongside this one.
Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
berntpoppSkilldependency-cve-sweep
Use when handling Dependabot PRs, CodeQL/Trivy alerts, or doing a routine dependency/CVE sweep for this repo.
Also in 12 projects that use this
berntpoppSkillfleet-standard-adoption
Use when bringing this repo into compliance with a GeneFoundry fleet standard (tool-naming, response-envelope, container-hardening, versioning, MCP transport, or logging) or closing its tracking issue.
Also in 12 projects that use this
IgorGanapolskySkillci-failure-triage
Triage a CI / PR check failure by READING the failure body before forming any hypothesis. Triggered whenever a required check is red, a PR is BLOCKED, a merge won't land, or you're about to call a failure "transient", "flaky", "stale", or "orphaned". Prevents dismissing a real failure (e.g. real CodeQL security alerts) as noise.
Also in 12 projects that use this
Microsoft AzureSkillrelease-readiness
Complete ODIN release documentation and validation checks before declaring user-visible work complete, preparing a release, or opening the Release-to-main pull request.
Also in 12 projects that use this
SentrySkillsecurity-review
Finds exploitable application security vulnerabilities in code changes. Use for Warden security scans, appsec review, OWASP-style checks, authentication or authorization bugs, injection, XSS, SSRF, path traversal, secrets, unsafe crypto, webhook verification, open redirects, or sensitive data exposure.
Also in 13 projects that use this
AWSSkillretro
Conduct a retrospective on a coding session.
Also in 3 projects that use this
- +2 more from berntpopp
Other versions23 projects use a version of this.
Word for word · 1
- Onevium/skills★ 1100% same
Edited · 0
None found.
Wrote their own version · 22
- paiml/aprender★ 137same name
- jellydn/my-ai-tools★ 127same name
- 535803710/ai-rd-skills★ 8same name
- berntpopp/genefoundry-router★ 6same name
- NovruzAliyevDev/skills★ 4same name
- VersoXBT/claude-recommended-skills★ 4same name
- ming-kang/Skills★ 3same name
- damacus/agent-skills★ 2same name
- berntpopp/hpo-link★ 1same name
- berntpopp/mgi-link★ 1same name
12 more not listed
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
In this repository16 other files it gives its agents.
- narrative-video-directorSkill
- portrait-shoot-directorSkill
- accessibility-auditSkill
- ai-slop-checkSkill
- component-extractSkill
- design-system-extractSkill
- discovery-questionsSkill
- frontend-aesthetic-directionSkill
- generate-variationsSkill
- hierarchy-rhythm-reviewSkill
- interaction-states-passSkill
- make-a-deckSkill
- make-a-prototypeSkill
- make-tweakableSkill
- polish-passSkill
- wireframeSkill
The file
Files
核爆级代码质量审查
对真实变更做高强度、证据驱动的可维护性审查。目标不是挑更多毛病,而是找出少量会让代码库长期变差的结构性问题,以及能直接删除复杂度的重构路径。
审查边界
- 默认只审查并报告,不修改代码、不提交、不推送;只有用户明确要求修复时才实施更改。
- 以实际 diff 为中心,按需读取上下文、调用方、既有抽象和测试;不要根据文件名或局部片段猜测问题。
- 尊重用户指定的基线和范围。未指定时,优先使用 PR 的目标分支;没有 PR 上下文时,再以仓库默认分支的合并基点和未提交变更确定范围。
- 只评价本次变更引入或实质放大的问题。既有问题可作为背景,但不要伪装成本次变更的发现。
- 所有重构建议都要说明必须保持的行为,以及如何验证行为没有变化。
执行流程
- 建立审查范围:确认基线、diff、变更文件和用户是否只要审查。
- 绘制影响路径:追踪入口、核心状态、边界、持久化或外部副作用和测试,不把审查停留在逐行 diff。
- 加载量表:执行正式审查时读取 reference.md,逐项检查结构简化、分支增长、抽象、类型边界、归属层、文件规模和编排一致性。
- 寻找“代码柔道”:优先寻找能删除概念、分支、包装层或特殊模式的重新建模方式;不要满足于把同一份复杂度搬到更多文件。
- 反证每个发现:检查是否存在既有约定、生成代码、声明式数据或性能与兼容性约束,使表面问题其实合理。
- 按证据输出:只保留高置信度、可定位、可行动的发现;不用品味偏好和低价值格式意见充数。
核心判断
- 这次变更能否用更少的概念、状态、分支或层次表达?
- 是否把功能特例散落进原本通用的流程,导致局部修复变成全局耦合?
- 新抽象是否真正降低理解成本,还是只增加转发、包装和命名?
- 类型、可空性、转换或静默回退是否掩盖了本应明确的不变量?
- 逻辑是否位于真正拥有该概念的层,并复用了代码库里的唯一权威实现?
- 文件变大是否反映职责扩散?“超过约 1000 行”只是一条强信号,不能脱离内容类型机械判定。
- 异步步骤是否无必要地串行?相关更新是否可能留下难以恢复的半完成状态?只有能同时提升正确性和清晰度时才建议并行或原子化。
输出契约
先给发现,再给结论。每个发现必须包含:
- 严重级别和标题:使用
[P0]至[P3],标题直接写出结构性后果。 - 证据位置:给出最小文件和行号范围,并说明本次 diff 如何触发问题。
- 影响机制:解释复杂度、耦合或维护风险如何产生,避免只给结论。
- 优先修复方向:提出能保持行为的最小结构调整;没有可靠方案时明确说出未知点。
- 验证方式:指出应运行或补充的测试、检查或不变量。
结尾使用以下三种结论之一:
- 阻塞:存在 P0/P1,或有证据表明结构退化会显著扩大后续风险。
- 有条件通过:只有非阻塞问题,但应明确记录后续动作。
- 通过:没有达到报告门槛的发现;同时列出未验证范围和残余风险。
不得因为“代码能运行”就通过,也不得为了显得严格而虚构问题。输出风格参考 examples.md。
来源与许可
本 Skill 基于 Cursor 的 thermo-nuclear-code-quality-review 思路进行中文重构与渐进式拆分,不是逐句翻译。上游与本改编均按 MIT License 发布,版权声明见 LICENSE.txt。
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

