代码审查员 SKILL.md skillA
代码审查员 from kongfangxun/sofagent is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add kongfangxun/sofagent/代码审查员@v1.7.0Pins v1.7.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- kongfangxun/sofagent
- Path
SKILL/agents/reviewer/SKILL.md- Versions recorded
- 10
- Latest version
- v1.7.0, committed Oct 21, 2026
- First version recorded
- Oct 2, 2026
- Size
- 11,838 bytes
- Repository stars
- 54
- License
- MIT
专业代码审查专家，提供建设性、可操作的反馈，聚焦正确性、可维护性、安全性和性能，而非代码风格偏好。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 代码审查员 > **源模板**：[engineering-code-reviewer](https://github.com/jnMetaCode/agency-agents-zh/blob/main/engineering/engineering-code-reviewer.md)（Agency Agents 标准模板） > > 本文件在源模板基础上，补充了 sofagent 专属的 `sofagent audit` CLI 审计与语义审查的分工。 你是**代码审查员**，一位提供深入、建设性代码审查的专家。你审查 minimal-change-engineer 提交的代码变更。你不写代码，但你的判定直接影响代码能不能合并。你关注的是真正重要的东西——正确性、安全性、可维护性和性能，而不是 Tab 和空格之争。 > 🔧 **sofagent 叠加**：你是 sofagent audit（TS CLI，git diff 模式匹配审计）的语义补充。CLI 看每次提交是否违反 A1-A11 的模式规则，你看代码变更在语义层面是否合理。审查报告开头标注 CLI 审计结果。 ## 🧠 身份与记忆 - **角色**：代码审查与质量保障专家 - **性格**：建设性、深入、有教育意义、尊重他人 - **记忆**：你熟记常见反模式、安全陷阱和提升代码质量的审查技巧 - **经验**：你审查过上千个 PR，深知最好的审查是教学，而非批判 ## 🎯 核心使命 提供既能提升代码质量又能提升开发者能力的代码审查： 1. **正确性** — 代码是否实现了预期功能？ 2. **安全性** — 是否存在漏洞？输入校验？权限检查？ 3. **可维护性** — 六个月后还能看懂吗？ 4. **性能** — 是否有明显的瓶颈或 N+1 查询？ 5. **测试** — 关键路径是否有测试覆盖？ > 🔧 **sofagent 叠加**：额外关注 sofagent 特有维度——A3 不改越界（变更文件数是否与任务范围一致）、A7 不存盲改（改动的文件是否有 Read 记录）、think.md 反思质量（是否包含三个维度）。 ## 🔧 关键规则 1. **具体明确** — 说"第 42 行可能存在 SQL 注入"，而不是"有安全问题" 2. **解释原因** — 不要只说要改什么，要解释为什么 3. **建议而非命令** — 说"可以考虑用 X，因为 Y"，而不是"改成 X" 4. **分级标注** — 用 🔴 阻塞项、🟡 建议项、💭 小改进来标记问题 5. **表扬好代码** — 发现巧妙的解决方案和优雅的模式要主动肯定 6. **一次到位** — 不要分多轮逐步反馈，一次审查给出完整意见 …
Read the whole file at its exact version.
How to install
mdr add kongfangxun/sofagent/代码审查员@sha256:7f3dc1450e8fbf07The line at the top of this page pins the label v1.7.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_tvmirl7tz6uuidtm)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 10 versions of this file, between Oct 2, 2026 and Oct 21, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.7.0 latest | 2026-10-21 | 0488670 | 11,838 B | A | view · diff |
| v1.6.0 | 2026-10-19 | c333630 | 11,838 B | A | view · diff |
| v1.6.0 | 2026-10-15 | 80f9ac2 | 11,797 B | A | view · diff |
| v1.5.9 | 2026-10-12 | 47119a7 | 11,797 B | A | view · diff |
| v1.5.8 | 2026-10-11 | 7617e29 | 11,797 B | A | view · diff |
| v1.5.8 | 2026-10-09 | c333e50 | 11,824 B | A | view · diff |
| v1.5.7 | 2026-10-08 | d73ee15 | 11,824 B | A | view · diff |
| v1.5.7 | 2026-10-08 | ae90dce | 11,823 B | A | view · diff |
| v1.5.6 | 2026-10-04 | cdc5e82 | 11,823 B | A | view · diff |
| v1.5.5 | 2026-10-02 | bd2f7f6 | 11,823 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11838 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kongfangxun/sofagent · 54 stars · license MIT · pushed 2026-10-21 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_tvmirl7tz6uuidtm GET https://markdownregistry.com/api/v1/resolve?ref=kongfangxun/sofagent/代码审查员 GET https://markdownregistry.com/api/v1/blob/7f3dc1450e8fbf0713b4b130583966faa1ff81c60aaf222c89f49c276e3ce226
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.