360 Secure SkillHub
360 安全技能中心

Review Loop

核心功能:支持设定最大审查轮次,每轮启动全新只读审查子代理,聚焦关键问题并记录含位置、原因、建议的结果;验证后修复问题,重复循环直至结束。典型场景:代码开发后的多轮质量把控。输入:待审查代码、测试用例等,可配置max_rounds;输出:各轮审查修复记录、含剩余风险的最终总结。

wufei-png
wufei-png
热度 20.92
最近更新 2026-08-08 00:20:51
分类:开发依赖:代码执行 / 内部调用大模型 / MCP 服务应用场景:代码审查 / 调试排错

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add review-loop
Metadata
name
review-loop
description
Run a bounded review-and-fix loop with fresh, read-only reviewer subagents.
license
MIT-0

Review Loop

Set max_rounds to the user's positive integer, or 3 when no limit is given.

Each round

  1. Start one fresh subagent with fork_turns: "none" and $review-agent. The reviewer may inspect code, tests, and call sites, but must only review. Wait patiently for its conclusion; unless the reviewer is confirmed to be in an abnormal state, do not send prompts to rush or wrap up the review.
  2. Ask the reviewer to focus on Critical, Important, and clearly worthwhile issues. Record Minor issues as non-blocking. Every finding must include:
    • Issue
    • File/line number
    • Reason
    • Recommendation
  3. Close the subagent after its report. If there are no findings, only Minor findings, or all findings are not accepted, finalize. Otherwise, verify each finding yourself:
    • Record invalid or unaccepted findings as Not accepted with the reason.
    • If an implementation subagent owns the change, delegate accepted fixes to it; otherwise fix them yourself. In either case, rerun the relevant tests after each fix.
    • If at least one fix was made and round < max_rounds, start a different fresh reviewer for the next round.
  4. On the final configured round, apply and test accepted fixes but do not start another reviewer. Report any resulting review boundary or residual risk.

Finalize

Summarize the implementation, each round's findings and decisions, fixes, verification results, unverified items, and remaining risks.