360 Secure SkillHub
360 安全技能中心

Delegated Code Review

核心功能:启动只读子代理聚焦关键/重要问题做代码评审,记录问题细节;评审后验证问题,将可接受的修复委派或自行处理,修复后重跑测试,最终汇总结果。典型场景:需专业无干扰的代码评审及修复跟进的开发场景。输入为待评审的代码、测试及调用站点,输出为评审报告、修复结果及最终总结。

wufei-png
wufei-png
热度 21.45
最近更新 2026-08-08 00:20:51
分类:开发依赖:MCP 服务 / 代码执行 / 内部调用大模型应用场景:代码审查

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add delegated-code-review
Metadata
name
delegated-code-review
description
Perform a single review with a fresh, read-only subagent, then verify findings and apply accepted fixes.
license
MIT-0

Delegated Code Review

Review

  1. Start one fresh subagent with fork_turns: "none" and $review-agent. The reviewer may inspect code, tests, and call sites, but must only review. Wait patiently for its conclusion; unless the reviewer is confirmed to be in an abnormal state, do not send prompts to rush or wrap up the review.
  2. Ask the reviewer to focus on Critical, Important, and clearly worthwhile issues. Record Minor issues as non-blocking. Every finding must include:
    • Issue
    • File/line number
    • Reason
    • Recommendation
  3. Close the subagent after its report. If there are no findings, only Minor findings, or all findings are not accepted, finalize. Otherwise, verify each finding yourself:
    • Record invalid or unaccepted findings as Not accepted with the reason.
    • If an implementation subagent owns the change, delegate accepted fixes to it; otherwise fix them yourself. In either case, rerun the relevant tests after each fix.

Finalize

Summarize the implementation, findings and decisions, fixes, verification results, unverified items, and remaining risks.