{
  "markdown": "<div align=\"center\">\n\n<h1>&#128269; Code Review Skill</h1>\n\n<p>\n  <strong>A comprehensive, modular code review skill for Claude Code</strong><br/>\n  <strong>面向 Claude Code 的全面模块化代码审查技能</strong>\n</p>\n\n<p>\n  <a href=\"https://github.com/awesome-skills/code-review-skill/blob/main/LICENSE\">\n    <img src=\"https://img.shields.io/badge/License-MIT-22c55e?style=flat-square\" alt=\"License: MIT\"/>\n  </a>\n  <img src=\"https://img.shields.io/badge/Claude_Code-Skill-7c3aed?style=flat-square&logo=anthropic&logoColor=white\" alt=\"Claude Code Skill\"/>\n  <img src=\"https://img.shields.io/badge/Total_Lines-21%2C000%2B-3b82f6?style=flat-square\" alt=\"21000+ lines\"/>\n  <img src=\"https://img.shields.io/badge/Languages-20%2B-f59e0b?style=flat-square\" alt=\"20+ languages\"/>\n  <img src=\"https://img.shields.io/badge/PRs-Welcome-ec4899?style=flat-square\" alt=\"PRs Welcome\"/>\n</p>\n\n<p>\n  <a href=\"#english\">English</a>\n  &middot;\n  <a href=\"#chinese\">中文</a>\n  &middot;\n  <a href=\"./CONTRIBUTING.md\">Contributing</a>\n</p>\n\n</div>\n\n---\n\n<a name=\"english\"></a>\n\n## English\n\n### What is this?\n\n**Code Review Skill** is a production-ready skill for [Claude Code](https://claude.ai/code) that transforms AI-assisted code review from vague suggestions into a **structured, consistent, and expert-level** process.\n\nIt covers **20+ languages and frameworks** with over **21,000 lines** of carefully curated review guidelines — loaded progressively to minimize context window usage.\n\n---\n\n### &#10024; Key Features\n\n- **Progressive Disclosure** — Core skill is ~220 lines; language guides (~200–1,100 lines each) load only when needed.\n- **Four-Phase Review Process** — Structured workflow from understanding scope to delivering clear feedback.\n- **Severity Labeling** — Every finding is categorized: `blocking` · `important` · `nit` · `suggestion` · `learning` · `praise`\n- **Security-First** — Dedicated security checklists per language ecosystem.\n- **Collaborative Tone** — Questions over commands, suggestions over mandates.\n- **Automation Awareness** — Clearly separates what human review should catch vs. what linters handle.\n\n---\n\n### &#127760; Supported Languages & Frameworks\n\n<table>\n  <thead>\n    <tr>\n      <th>Category</th>\n      <th>Technology</th>\n      <th>Guide</th>\n      <th>Lines</th>\n    </tr>\n  </thead>\n  <tbody>\n    <tr>\n      <td rowspan=\"6\"><strong>Frontend</strong></td>\n      <td>&#9883;&#65039; React 19 / Next.js / TanStack Query v5</td>\n      <td><code>reference/react.md</code></td>\n      <td>~870</td>\n    </tr>\n    <tr>\n      <td>&#128154; Vue 3.5 + Composition API</td>\n      <td><code>reference/vue.md</code></td>\n      <td>~920</td>\n    </tr>\n    <tr>\n      <td>&#128302; Angular 17+ / Signals / Zoneless</td>\n      <td><code>reference/angular.md</code></td>\n      <td>~790</td>\n    </tr>\n    <tr>\n      <td>&#128293; Svelte 5 / SvelteKit</td>\n      <td><code>reference/svelte.md</code></td>\n      <td>~1,060</td>\n    </tr>\n    <tr>\n      <td>&#127912; CSS / Less / Sass</td>\n      <td><code>reference/css-less-sass.md</code></td>\n      <td>~660</td>\n    </tr>\n    <tr>\n      <td>&#128311; TypeScript</td>\n      <td><code>reference/typescript.md</code></td>\n      <td>~1,020</td>\n    </tr>\n    <tr>\n      <td rowspan=\"11\"><strong>Backend</strong></td>\n      <td>&#9749; Java 17/21 + Spring Boot 3</td>\n      <td><code>reference/java.md</code></td>\n      <td>~410</td>\n    </tr>\n    <tr>\n      <td>&#9749; Java 8 + Spring Boot 2</td>\n      <td><code>reference/java8.md</code></td>\n      <td>~580</td>\n    </tr>\n    <tr>\n      <td>&#9889; FastAPI</td>\n      <td><code>reference/fastapi.md</code></td>\n      <td>~590</td>\n    </tr>\n    <tr>\n      <td>PHP 8.x</td>\n      <td><code>reference/php.md</code></td>\n      <td>~700</td>\n    </tr>\n    <tr>\n      <td>&#128142; Ruby 3.4+/4.0 + Rails 8.x</td>\n      <td><code>reference/ruby.md</code></td>\n      <td>~960</td>\n    </tr>\n    <tr>\n      <td>&#128230; NestJS</td>\n      <td><code>reference/nestjs.md</code></td>\n      <td>~590</td>\n    </tr>\n    <tr>\n      <td>&#128013; Django / DRF</td>\n      <td><code>reference/django.md</code></td>\n      <td>~1,030</td>\n    </tr>\n    <tr>\n      <td>&#128057; Go</td>\n      <td><code>reference/go.md</code></td>\n      <td>~990</td>\n    </tr>\n    <tr>\n      <td>&#129408; Rust</td>\n      <td><code>reference/rust.md</code></td>\n      <td>~840</td>\n    </tr>\n    <tr>\n      <td>&#128187; C# / .NET 8</td>\n      <td><code>reference/csharp.md</code></td>\n      <td>~520</td>\n    </tr>\n    <tr>\n      <td>&#128013; Python</td>\n      <td><code>reference/python.md</code></td>\n      <td>~1,070</td>\n    </tr>\n    <tr>\n      <td rowspan=\"7\"><strong>Mobile / Systems</strong></td>\n      <td>&#128241; Kotlin / Android</td>\n      <td><code>reference/kotlin.md</code></td>\n      <td>~1,020</td>\n    </tr>\n    <tr>\n      <td>&#127822; Swift / SwiftUI</td>\n      <td><code>reference/swift.md</code></td>\n      <td>~930</td>\n    </tr>\n    <tr>\n      <td>&#127919; Dart / Flutter</td>\n      <td><code>reference/dart.md</code></td>\n      <td>~650</td>\n    </tr>\n    <tr>\n      <td>&#9881;&#65039; C</td>\n      <td><code>reference/c.md</code></td>\n      <td>~890</td>\n    </tr>\n    <tr>\n      <td>&#128297; C++</td>\n      <td><code>reference/cpp.md</code></td>\n      <td>~890</td>\n    </tr>\n    <tr>\n      <td>&#9889; Zig</td>\n      <td><code>reference/zig.md</code></td>\n      <td>~440</td>\n    </tr>\n    <tr>\n      <td>&#128421;&#65039; Qt Framework</td>\n      <td><code>reference/qt.md</code></td>\n      <td>~760</td>\n    </tr>\n    <tr>\n      <td rowspan=\"9\"><strong>Cross-Cutting</strong></td>\n      <td>&#127963;&#65039; Architecture Design Review</td>\n      <td><code>reference/architecture-review-guide.md</code></td>\n      <td>~470</td>\n    </tr>\n    <tr>\n      <td>&#9889; Performance Review</td>\n      <td><code>reference/performance-review-guide.md</code></td>\n      <td>~820</td>\n    </tr>\n    <tr>\n      <td>&#128269; Universal Quality Anti-Patterns</td>\n      <td><code>reference/code-quality-universal.md</code></td>\n      <td>~490</td>\n    </tr>\n    <tr>\n      <td>&#128737;&#65039; Security Review</td>\n      <td><code>reference/security-review-guide.md</code></td>\n      <td>~640</td>\n    </tr>\n    <tr>\n      <td>&#128200; N+1 Queries</td>\n      <td><code>reference/cross-cutting/n-plus-one-queries.md</code></td>\n      <td>~310</td>\n    </tr>\n    <tr>\n      <td>&#9888;&#65039; Error Handling Principles</td>\n      <td><code>reference/cross-cutting/error-handling-principles.md</code></td>\n      <td>~490</td>\n    </tr>\n    <tr>\n      <td>&#9889; Async &amp; Concurrency Patterns</td>\n      <td><code>reference/cross-cutting/async-concurrency-patterns.md</code></td>\n      <td>~540</td>\n    </tr>\n    <tr>\n      <td>&#128737;&#65039; SQL Injection Prevention</td>\n      <td><code>reference/cross-cutting/sql-injection-prevention.md</code></td>\n      <td>~310</td>\n    </tr>\n    <tr>\n      <td>&#128737;&#65039; XSS Prevention</td>\n      <td><code>reference/cross-cutting/xss-prevention.md</code></td>\n      <td>~260</td>\n    </tr>\n  </tbody>\n</table>\n\n---\n\n### &#128260; The Four-Phase Review Process\n\n```\nPhase 1 - Context Gathering\n  Understand PR scope, linked issues, and intent\n                    |\n                    v\nPhase 2 - High-Level Review\n  Architecture - Performance impact - Test strategy\n                    |\n                    v\nPhase 3 - Line-by-Line Analysis\n  Logic - Security - Maintainability - Edge cases\n                    |\n                    v\nPhase 4 - Summary & Decision\n  Structured feedback - Approval status - Action items\n```\n\n---\n\n### &#127991;&#65039; Severity Labels\n\n| Label | Meaning |\n|-------|---------|\n| &#128308; `blocking` | Must be fixed before merge |\n| &#128992; `important` | Should be fixed; may block depending on context |\n| &#128993; `nit` | Minor style or preference issue |\n| &#128309; `suggestion` | Optional improvement worth considering |\n| &#128218; `learning` | Educational note for the author |\n| &#127775; `praise` | Explicitly highlight great work |\n\n---\n\n### &#128193; Repository Structure\n\n```\ncode-review-skill/\n|\n+-- SKILL.md                              # Core skill - loaded on activation (~220 lines)\n+-- README.md\n+-- LICENSE\n+-- CONTRIBUTING.md\n|\n+-- reference/                            # On-demand language guides\n|   +-- react.md                          # React 19 / Next.js / TanStack Query v5\n|   +-- vue.md                            # Vue 3.5 Composition API\n|   +-- angular.md                        # Angular 17+ / Signals / Zoneless\n|   +-- svelte.md                         # Svelte 5 / SvelteKit\n|   +-- rust.md                           # Rust ownership, async/await, unsafe\n|   +-- typescript.md                     # TypeScript strict mode, generics, ESLint\n|   +-- nestjs.md                         # NestJS DI, Guards, Interceptors, DTOs\n|   +-- java.md                           # Java 17/21 & Spring Boot 3\n|   +-- java8.md                          # Java 8 & Spring Boot 2 (legacy)\n|   +-- php.md                            # PHP 8.x types, PDO, security, Composer\n|   +-- ruby.md                           # Ruby 3.4+/4.0, Rails 8.x, Active Record/Job\n|   +-- python.md                         # Python async, typing, pytest\n|   +-- django.md                         # Django / DRF security, serializers, async\n|   +-- fastapi.md                        # FastAPI Depends, Pydantic v2, async, test-driven verification\n|   +-- go.md                             # Go goroutines, channels, context, interfaces\n|   +-- kotlin.md                         # Kotlin / Android coroutines, Compose, Flow\n|   +-- swift.md                          # Swift 5.9+/6, SwiftUI, concurrency, optionals\n|   +-- dart.md                           # Dart / Flutter rebuilds, null safety, isolates, state\n|   +-- csharp.md                         # C# 12 / .NET 8, EF Core, ASP.NET Core\n|   +-- c.md                              # C memory safety, UB, error handling\n|   +-- cpp.md                            # C++ RAII, move semantics, exception safety\n|   +-- zig.md                            # Zig allocators, errors, comptime, C interop\n|   +-- qt.md                             # Qt object model, signals/slots, GUI perf\n|   +-- css-less-sass.md                  # CSS/Less/Sass variables, responsive design\n|   +-- architecture-review-guide.md      # SOLID, anti-patterns, coupling/cohesion\n|   +-- code-quality-universal.md        # Reuse audit, parameter sprawl, TOCTOU, no-op updates\n|   +-- performance-review-guide.md       # Core Web Vitals, N+1, memory leaks\n|   +-- security-review-guide.md          # Security checklist (all languages)\n|   +-- common-bugs-checklist.md          # Language-specific bug patterns\n|   +-- code-review-best-practices.md     # Communication & process guidelines\n|\n+-- reference/cross-cutting/             # Language-agnostic cross-cutting patterns\n|   +-- sql-injection-prevention.md       # Parameterized queries, 6 languages\n|   +-- xss-prevention.md                 # Output encoding, CSP, 5 frameworks\n|   +-- n-plus-one-queries.md             # N+1 queries, eager loading, 5 languages\n|   +-- error-handling-principles.md      # Error handling principles, 7 languages\n|   +-- async-concurrency-patterns.md     # Concurrency patterns, 7 languages\n|\n+-- assets/\n|   +-- review-checklist.md               # Quick reference checklist\n|   +-- pr-review-template.md             # PR review comment template\n|\n+-- scripts/\n    +-- pr-analyzer.py                    # PR complexity analyzer\n```\n\n---\n\n### &#128640; Installation\n\n**Install with `npx skills` (Cursor, Claude Code, Codex, OpenCode, and other agents):**\n\n```bash\nnpx skills add awesome-skills/code-review-skill --skill code-review-skill\n```\n\nThe skills CLI finds `SKILL.md` at the repo root. Do not nest this skill under `skills/`.\n\n**Or clone into the Claude Code skills directory:**\n\n```bash\n# macOS / Linux\ngit clone https://github.com/awesome-skills/code-review-skill.git \\\n  ~/.claude/skills/code-review-skill\n\n# Windows (PowerShell)\ngit clone https://github.com/awesome-skills/code-review-skill.git `\n  \"$env:USERPROFILE\\.claude\\skills\\code-review-skill\"\n```\n\n**Or add to an existing plugin:**\n\n```bash\ncp -r code-review-skill ~/.claude/plugins/your-plugin/skills/code-review/\n```\n\n---\n\n### &#128161; Usage\n\nOnce installed, activate the skill in your Claude Code session:\n\n```\nUse code-review-skill to review this PR\n```\n\nOr create a custom slash command in `.claude/commands/`:\n\n```markdown\n<!-- .claude/commands/review.md -->\nUse code-review-skill to perform a thorough review of the changes in this PR.\nFocus on: security, performance, and maintainability.\n```\n\n**Example prompts:**\n\n| Prompt | What happens |\n|--------|-------------|\n| `Review this React component` | Loads `react.md` - checks hooks, Server Components, Suspense patterns |\n| `Review this Java PR` | Loads `java.md` - checks virtual threads, JPA, Spring Boot 3 patterns |\n| `Review this Java 8 / Spring Boot 2 PR` | Loads `java8.md` - Stream/Optional, java.time, RestTemplate timeouts, javax.* |\n| `Review this Flutter widget` | Loads `dart.md` - rebuilds, const, null safety, isolates, Riverpod/Bloc, keys, disposal |\n| `Security review of this Go service` | Loads `go.md` + `security-review-guide.md` |\n| `Architecture review` | Loads `architecture-review-guide.md` - SOLID, anti-patterns, coupling |\n| `Performance review` | Loads `performance-review-guide.md` - Web Vitals, N+1, complexity |\n\n---\n\n### &#128300; Highlights by Language\n\n<details>\n<summary><strong>&#9883;&#65039; React 19</strong></summary>\n\n- `useActionState` - Unified form state management\n- `useFormStatus` - Access parent form status without prop drilling\n- `useOptimistic` - Optimistic UI updates with automatic rollback\n- Server Components & Server Actions patterns (Next.js 15+)\n- Suspense boundary design, Error Boundary integration, streaming SSR\n- `use()` Hook for consuming Promises\n\n</details>\n\n<details>\n<summary><strong>&#9749; Java & Spring Boot 3</strong></summary>\n\n- **Java 17/21**: Records, Pattern Matching for Switch, Text Blocks, Sealed Classes\n- **Virtual Threads** (Project Loom): High-throughput I/O patterns\n- **Spring Boot 3**: Constructor injection, `@ConfigurationProperties`, `ProblemDetail`\n- **JPA Performance**: Solving N+1, correct `equals`/`hashCode` on Entities\n\n</details>\n\n<details>\n<summary><strong>&#9749; Java 8 & Spring Boot 2 (Legacy)</strong></summary>\n\n- **Java 8**: Lambda, Stream/`Collectors`, Optional, `java.time` (no Records / virtual threads)\n- **Concurrency**: bounded thread pools, `CompletableFuture` + explicit executors\n- **Spring Boot 2**: `javax.*`, constructor injection, `RestTemplate` timeouts\n- **JPA / Hibernate 5**: N+1, Entity `equals`/`hashCode`, UTC time mapping pitfalls\n\n</details>\n\n<details>\n<summary><strong>&#129408; Rust</strong></summary>\n\n- Ownership patterns and common pitfalls\n- `unsafe` code review requirements (mandatory `SAFETY` comments)\n- Async/await - avoiding blocking in async context, cancellation safety\n- Error handling: `thiserror` for libraries, `anyhow` for applications\n\n</details>\n\n<details>\n<summary><strong>&#128057; Go</strong></summary>\n\n- Goroutine lifecycle management and leak prevention\n- Channel patterns, select usage\n- `context.Context` propagation\n- Interface design (accept interfaces, return structs)\n- Error wrapping with `%w`\n\n</details>\n\n<details>\n<summary><strong>&#9881;&#65039; C / C++</strong></summary>\n\n- **C**: Pointer/buffer safety, undefined behavior, resource cleanup, integer overflow\n- **C++**: RAII ownership, Rule of 0/3/5, move semantics, exception safety, `noexcept`\n- **Qt**: Object parent/child memory model, thread-safe signal/slot connections, GUI performance\n\n</details>\n\n---\n\n### &#129309; Contributing\n\nContributions are welcome! See [CONTRIBUTING.md](./CONTRIBUTING.md) for guidelines.\n\n**Ideas:**\n- New language guides (Elixir, Scala, Lua...)\n- Framework-specific guides (Laravel, Spring WebFlux...)\n- Additional checklists and templates\n- Translations of core documentation\n\n---\n\n### &#128196; License\n\nMIT &copy; [awesome-skills](https://github.com/awesome-skills)\n\n---\n\n<a name=\"chinese\"></a>\n\n## 中文\n\n### 这是什么？\n\n**Code Review Skill** 是专为 [Claude Code](https://claude.ai/code) 打造的生产级代码审查技能，将 AI 辅助的代码审查从模糊建议转变为**结构化、一致且专业级**的流程。\n\n覆盖 **20+ 种语言和框架**，拥有超过 **21,000 行**精心整理的代码审查指南——按需加载，最大程度减少上下文占用。\n\n---\n\n### &#10024; 核心特性\n\n- **渐进式加载** — 核心技能仅 ~220 行，各语言指南（每份 200–1,100 行）仅在需要时才加载。\n- **四阶段审查流程** — 从理解 PR 范围到输出清晰反馈，每一步都有规可循。\n- **严重性标记** — 每条发现均分级：`blocking` · `important` · `nit` · `suggestion` · `learning` · `praise`\n- **安全优先** — 每个语言生态均配备专属安全检查清单。\n- **协作式语气** — 以提问替代命令，以建议替代指令。\n- **自动化感知** — 明确区分人工审查应关注的内容与 linter 自动处理的内容。\n\n---\n\n### &#127760; 支持的语言与框架\n\n| 分类 | 技术栈 | 指南文件 | 行数 |\n|------|--------|----------|------|\n| **前端** | &#9883;&#65039; React 19 / Next.js / TanStack Query v5 | `reference/react.md` | ~870 |\n| | &#128154; Vue 3.5 Composition API | `reference/vue.md` | ~920 |\n| | &#128302; Angular 17+ / Signals / Zoneless | `reference/angular.md` | ~790 |\n| | &#128293; Svelte 5 / SvelteKit | `reference/svelte.md` | ~1,060 |\n| | &#127912; CSS / Less / Sass | `reference/css-less-sass.md` | ~660 |\n| | &#128311; TypeScript | `reference/typescript.md` | ~1,020 |\n| **后端** | &#9749; Java 17/21 + Spring Boot 3 | `reference/java.md` | ~410 |\n| | &#9749; Java 8 + Spring Boot 2 | `reference/java8.md` | ~580 |\n| | &#9889; FastAPI | `reference/fastapi.md` | ~590 |\n| | PHP 8.x | `reference/php.md` | ~700 |\n| | &#128142; Ruby 3.4+/4.0 + Rails 8.x | `reference/ruby.md` | ~960 |\n| | &#128230; NestJS | `reference/nestjs.md` | ~590 |\n| | &#128013; Django / DRF | `reference/django.md` | ~1,030 |\n| | &#128013; Python | `reference/python.md` | ~1,070 |\n| | &#128057; Go | `reference/go.md` | ~990 |\n| | &#129408; Rust | `reference/rust.md` | ~840 |\n| | &#128187; C# / .NET 8 | `reference/csharp.md` | ~520 |\n| **移动 / 系统** | &#128241; Kotlin / Android | `reference/kotlin.md` | ~1,020 |\n| | &#127822; Swift / SwiftUI | `reference/swift.md` | ~930 |\n| | &#127919; Dart / Flutter | `reference/dart.md` | ~650 |\n| | &#9881;&#65039; C | `reference/c.md` | ~890 |\n| | &#128297; C++ | `reference/cpp.md` | ~890 |\n| | &#9889; Zig | `reference/zig.md` | ~440 |\n| | &#128421;&#65039; Qt 框架 | `reference/qt.md` | ~760 |\n| **架构** | &#127963;&#65039; 架构设计审查 | `reference/architecture-review-guide.md` | ~470 |\n| | &#9889; 性能审查 | `reference/performance-review-guide.md` | ~820 |\n| | &#128269; 通用质量反模式 | `reference/code-quality-universal.md` | ~490 |\n| | &#128737;&#65039; 安全审查 | `reference/security-review-guide.md` | ~640 |\n| | &#128200; N+1 查询 | `reference/cross-cutting/n-plus-one-queries.md` | ~310 |\n| | &#9888;&#65039; 错误处理原则 | `reference/cross-cutting/error-handling-principles.md` | ~490 |\n| | &#9889; 异步与并发模式 | `reference/cross-cutting/async-concurrency-patterns.md` | ~540 |\n| | &#128737;&#65039; SQL 注入防护 | `reference/cross-cutting/sql-injection-prevention.md` | ~310 |\n| | &#128737;&#65039; XSS 防护 | `reference/cross-cutting/xss-prevention.md` | ~260 |\n\n---\n\n### &#128260; 四阶段审查流程\n\n```\n阶段一 - 上下文收集\n  理解 PR 范围、关联 Issue 和实现意图\n                    |\n                    v\n阶段二 - 高层级审查\n  架构设计 - 性能影响 - 测试策略\n                    |\n                    v\n阶段三 - 逐行深度分析\n  逻辑正确性 - 安全漏洞 - 可维护性 - 边界情况\n                    |\n                    v\n阶段四 - 总结与决策\n  结构化反馈 - 审批状态 - 后续行动项\n```\n\n---\n\n### &#127991;&#65039; 严重性标记说明\n\n| 标记 | 含义 |\n|------|------|\n| &#128308; `blocking` | 合并前必须修复 |\n| &#128992; `important` | 应当修复，视情况可能阻塞合并 |\n| &#128993; `nit` | 风格或偏好上的小问题 |\n| &#128309; `suggestion` | 值得考虑的可选优化 |\n| &#128218; `learning` | 给作者的教育性说明 |\n| &#127775; `praise` | 明确表扬优秀代码 |\n\n---\n\n### &#128193; 仓库结构\n\n```\ncode-review-skill/\n|\n+-- SKILL.md                              # 核心技能，激活时加载（~220 行）\n+-- README.md\n+-- LICENSE\n+-- CONTRIBUTING.md\n|\n+-- reference/                            # 按需加载的语言指南\n|   +-- react.md                          # React 19 / Next.js / TanStack Query v5\n|   +-- vue.md                            # Vue 3.5 组合式 API\n|   +-- angular.md                        # Angular 17+ / Signals / Zoneless\n|   +-- svelte.md                         # Svelte 5 / SvelteKit\n|   +-- rust.md                           # Rust 所有权、async/await、unsafe\n|   +-- typescript.md                     # TypeScript strict 模式、泛型、ESLint\n|   +-- nestjs.md                         # NestJS 依赖注入、Guard、Interceptor、DTO\n|   +-- java.md                           # Java 17/21 & Spring Boot 3\n|   +-- java8.md                          # Java 8 & Spring Boot 2（遗留栈）\n|   +-- php.md                            # PHP 8.x 类型、PDO、安全、Composer\n|   +-- ruby.md                           # Ruby 3.4+/4.0、Rails 8.x、Active Record/Job\n|   +-- python.md                         # Python async、类型注解、pytest\n|   +-- django.md                         # Django / DRF 安全、Serializer、异步视图\n|   +-- fastapi.md                        # FastAPI Depends、Pydantic v2、异步、测试驱动验证\n|   +-- go.md                             # Go goroutine、channel、context、接口\n|   +-- kotlin.md                         # Kotlin / Android 协程、Compose、Flow\n|   +-- swift.md                          # Swift 5.9+/6、SwiftUI、并发、可选值\n|   +-- dart.md                           # Dart / Flutter 重建、空安全、isolate、状态\n|   +-- csharp.md                         # C# 12 / .NET 8、EF Core、ASP.NET Core\n|   +-- c.md                              # C 内存安全、UB、错误处理\n|   +-- cpp.md                            # C++ RAII、移动语义、异常安全\n|   +-- zig.md                            # Zig allocator、错误处理、comptime、C 互操作\n|   +-- qt.md                             # Qt 对象模型、信号/槽、GUI 性能\n|   +-- css-less-sass.md                  # CSS/Less/Sass 变量、响应式设计\n|   +-- architecture-review-guide.md      # SOLID、反模式、耦合度分析\n|   +-- code-quality-universal.md        # 复用审查、参数膨胀、抽象泄漏、TOCTOU\n|   +-- performance-review-guide.md       # Core Web Vitals、N+1、内存泄漏\n|   +-- security-review-guide.md          # 安全审查清单（全语言通用）\n|   +-- common-bugs-checklist.md          # 各语言常见 Bug 模式\n|   +-- code-review-best-practices.md     # 沟通与流程最佳实践\n|\n+-- reference/cross-cutting/             # 语言无关跨领域模式\n|   +-- sql-injection-prevention.md       # 参数化查询, 6 语言\n|   +-- xss-prevention.md                 # 输出编码, CSP, 5 框架\n|   +-- n-plus-one-queries.md             # N+1 查询, 预加载, 5 语言\n|   +-- error-handling-principles.md      # 错误处理原则, 7 语言\n|   +-- async-concurrency-patterns.md     # 并发模式, 7 语言\n|\n+-- assets/\n|   +-- review-checklist.md               # 快速参考清单\n|   +-- pr-review-template.md             # PR 审查评论模板\n|\n+-- scripts/\n    +-- pr-analyzer.py                    # PR 复杂度分析工具\n```\n\n---\n\n### &#128640; 安装方法\n\n**使用 `npx skills` 安装（Cursor、Claude Code、Codex、OpenCode 及其他 Agent）：**\n\n```bash\nnpx skills add awesome-skills/code-review-skill --skill code-review-skill\n```\n\nskills CLI 会发现仓库根目录的 `SKILL.md`。不要把本技能嵌套到 `skills/` 目录下。\n\n**或克隆到 Claude Code skills 目录：**\n\n```bash\n# macOS / Linux\ngit clone https://github.com/awesome-skills/code-review-skill.git \\\n  ~/.claude/skills/code-review-skill\n\n# Windows（PowerShell）\ngit clone https://github.com/awesome-skills/code-review-skill.git `\n  \"$env:USERPROFILE\\.claude\\skills\\code-review-skill\"\n```\n\n**或添加到现有插件：**\n\n```bash\ncp -r code-review-skill ~/.claude/plugins/your-plugin/skills/code-review/\n```\n\n---\n\n### &#128161; 使用方式\n\n安装后，在 Claude Code 会话中激活技能：\n\n```\nUse code-review-skill to review this PR\n```\n\n或在 `.claude/commands/` 中创建自定义斜杠命令：\n\n```markdown\n<!-- .claude/commands/review.md -->\n使用 code-review-skill 对这次 PR 的变更进行全面审查。\n重点关注：安全性、性能和可维护性。\n```\n\n**示例提示词：**\n\n| 提示词 | 效果 |\n|--------|------|\n| `审查这个 React 组件` | 加载 `react.md`，检查 Hooks、Server Components、Suspense |\n| `审查这个 Java PR` | 加载 `java.md`，检查虚拟线程、JPA、Spring Boot 3 |\n| `审查这个 Java 8 / Spring Boot 2 PR` | 加载 `java8.md`，检查 Stream/Optional、java.time、RestTemplate 超时、javax.* |\n| `审查这个 Flutter 组件` | 加载 `dart.md`，检查重建、const、空安全、isolate、Riverpod/Bloc、Key、释放 |\n| `对这个 Go 服务进行安全审查` | 加载 `go.md` + `security-review-guide.md` |\n| `架构审查` | 加载 `architecture-review-guide.md`，检查 SOLID 与反模式 |\n| `性能审查` | 加载 `performance-review-guide.md`，分析 Web Vitals、N+1 等 |\n\n---\n\n### &#128300; 各语言核心内容\n\n<details>\n<summary><strong>&#9883;&#65039; React 19</strong></summary>\n\n- `useActionState` — 统一的表单状态管理\n- `useFormStatus` — 无需 props 透传即可访问父表单状态\n- `useOptimistic` — 带自动回滚的乐观 UI 更新\n- Server Components & Server Actions（Next.js 15+）\n- Suspense 边界设计、Error Boundary 集成、流式 SSR\n- `use()` Hook 消费 Promise\n\n</details>\n\n<details>\n<summary><strong>&#9749; Java & Spring Boot 3</strong></summary>\n\n- **Java 17/21**：Records、Switch 模式匹配、文本块、Sealed Classes\n- **虚拟线程**（Project Loom）：高吞吐量 I/O 模式\n- **Spring Boot 3**：构造器注入、`@ConfigurationProperties`、`ProblemDetail`\n- **JPA 性能**：解决 N+1、Entity 正确的 `equals`/`hashCode` 实现\n\n</details>\n\n<details>\n<summary><strong>&#9749; Java 8 & Spring Boot 2（遗留栈）</strong></summary>\n\n- **Java 8**：Lambda、Stream/`Collectors`、Optional、`java.time`（无 Records / 虚拟线程）\n- **并发**：有界线程池、`CompletableFuture` + 显式 Executor\n- **Spring Boot 2**：`javax.*`、构造器注入、`RestTemplate` 超时\n- **JPA / Hibernate 5**：N+1、Entity `equals`/`hashCode`、UTC 时间映射陷阱\n\n</details>\n\n<details>\n<summary><strong>&#129408; Rust</strong></summary>\n\n- 所有权模式与常见陷阱\n- `unsafe` 代码审查要求（必须有 `SAFETY` 注释）\n- Async/await — 避免在异步上下文中阻塞，取消安全性\n- 错误处理：库用 `thiserror`，应用用 `anyhow`\n\n</details>\n\n<details>\n<summary><strong>&#128057; Go</strong></summary>\n\n- Goroutine 生命周期管理与泄漏预防\n- Channel 模式、select 用法\n- `context.Context` 传播规范\n- 接口设计原则（接受接口，返回结构体）\n- 错误包装：使用 `%w`\n\n</details>\n\n<details>\n<summary><strong>&#9881;&#65039; C / C++</strong></summary>\n\n- **C**：指针/缓冲区安全、未定义行为、资源清理、整数溢出\n- **C++**：RAII 所有权、Rule of 0/3/5、移动语义、异常安全、`noexcept`\n- **Qt**：父子内存模型、线程安全的信号/槽连接、GUI 性能优化\n\n</details>\n\n---\n\n### &#129309; 参与贡献\n\n欢迎贡献！请查阅 [CONTRIBUTING.md](./CONTRIBUTING.md) 了解规范。\n\n**可贡献方向：**\n- 新增语言指南（Elixir、Scala、Lua...）\n- 框架专属指南（Laravel、Spring WebFlux...）\n- 补充检查清单和审查模板\n- 核心文档的多语言翻译\n\n---\n\n### &#128196; 开源协议\n\nMIT &copy; [awesome-skills](https://github.com/awesome-skills)\n\n---\n\n<div align=\"center\">\n  Made with &#10084;&#65039; for developers who care about code quality\n</div>\n",
  "bytes": 25881,
  "sha": "58b6b12c61e11231e44552d54279849e795e0b907c55487403b38c4fe1835c67",
  "repo_slug": "awesome-skills/code-review-skill",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/skl_awesome_skills_code_review_skill_code_re_df2145b4/readme"
}