360 Secure SkillHub
360 安全技能中心

Review Loop

按 max_rounds 运行有界评审-修复循环。每轮启动新的只读评审子代理,要求按 Critical/Important/Minor 报告问题;关闭子代理后验证发现,接受则委派或自行修复并重跑测试,达到轮数或无误后总结实现、决策、修复与剩余风险。

wufei-png
wufei-png
热度 20.93
最近更新 2026-08-08 00:20:51
分类:开发依赖:内部调用大模型 / 代码执行 / 读写文件应用场景:代码审查 / 调试排错 / 代码生成 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add review-loop
Metadata
name
review-loop
description
Run a bounded review-and-fix loop with fresh, read-only reviewer subagents.
license
MIT-0

Review Loop

Set max_rounds to the user's positive integer, or 3 when no limit is given.

Each round

  1. Start one fresh subagent with fork_turns: "none" and $review-agent. The reviewer may inspect code, tests, and call sites, but must only review. Wait patiently for its conclusion; unless the reviewer is confirmed to be in an abnormal state, do not send prompts to rush or wrap up the review.
  2. Ask the reviewer to focus on Critical, Important, and clearly worthwhile issues. Record Minor issues as non-blocking. Every finding must include:
    • Issue
    • File/line number
    • Reason
    • Recommendation
  3. Close the subagent after its report. If there are no findings, only Minor findings, or all findings are not accepted, finalize. Otherwise, verify each finding yourself:
    • Record invalid or unaccepted findings as Not accepted with the reason.
    • If an implementation subagent owns the change, delegate accepted fixes to it; otherwise fix them yourself. In either case, rerun the relevant tests after each fix.
    • If at least one fix was made and round < max_rounds, start a different fresh reviewer for the next round.
  4. On the final configured round, apply and test accepted fixes but do not start another reviewer. Report any resulting review boundary or residual risk.

Finalize

Summarize the implementation, each round's findings and decisions, fixes, verification results, unverified items, and remaining risks.