reviewing-changes

作者: bitwarden

Android 专用代码审查清单及 Bitwarden Android 的 MVVM/Compose 模式验证——可用于任何审查任务,即使开发者未…

npx skills add https://github.com/bitwarden/android --skill reviewing-changes

Reviewing Changes - Android Additions

This skill provides Android-specific workflow additions that complement the base bitwarden-code-reviewer agent standards.

Instructions

IMPORTANT: Work systematically through each step before providing feedback. Each checklist file includes structured thinking guidance for its review passes.

Step 1: Retrieve Additional Details

Retrieve any additional information linked to the pull request using available tools (JIRA MCP, GitHub API).

If pull request title and message do not provide enough context, request additional details from the reviewer:

  • Link a JIRA ticket
  • Associate a GitHub issue
  • Link to another pull request
  • Add more detail to the PR title or body

Android metadata checks — flag as ❓ if any of these are missing:

  • PR includes *Screen.kt or Composable changes but has no screenshots
  • PR adds new ViewModel or Repository but has no test plan or test file changes

Step 2: Detect Change Type with Android Refinements

Use the base change type detection from the agent, with Android-specific refinements:

Android-specific patterns:

  • Feature Addition: New ViewModel, new Repository, new @Composable functions, new *Screen.kt files
  • UI Refinement: Changes only in *Screen.kt, *Composable.kt, ui/ package files
  • Infrastructure: Changes to .github/workflows/, gradle/, build.gradle.kts, libs.versions.toml
  • Dependency Update: Changes only to libs.versions.toml or build.gradle.kts with version bumps

Step 3: Load Appropriate Checklist

Based on detected type, read the relevant checklist file:

  • Dependency Updatechecklists/dependency-update.md (expedited review)
  • Bug Fixchecklists/bug-fix.md (focused review)
  • Feature Additionchecklists/feature-addition.md (comprehensive review)
  • UI Refinementchecklists/ui-refinement.md (design-focused review)
  • Refactoringchecklists/refactoring.md (pattern-focused review)
  • Infrastructurechecklists/infrastructure.md (tooling-focused review)

The checklist provides:

  • Multi-pass review strategy
  • Type-specific focus areas
  • What to check and what to skip
  • Structured thinking guidance

Step 4: Execute Review Following Checklist

Follow the checklist's multi-pass strategy, thinking through each pass systematically.

Step 5: Consult Android Reference Materials As Needed

Load reference files only when needed for specific questions:

  • Re-reviews → invoke reviewing-incremental-changes agent skill; scope to changed lines only, do not flag new issues in unchanged code
  • Issue prioritizationreference/priority-framework.md (Critical vs Suggested vs Optional)
  • Phrasing feedbackreference/review-psychology.md (questions vs commands, I-statements)
  • Architecture questionsreference/architectural-patterns.md (MVVM, Hilt DI, module org, error handling)
  • Security questions (quick reference)reference/security-patterns.md (common patterns and anti-patterns)
  • Security questions (comprehensive)docs/ARCHITECTURE.md#security (full zero-knowledge architecture)
  • Testing questionsreference/testing-patterns.md (unit tests, mocking, null safety)
  • UI questionsreference/ui-patterns.md (Compose patterns, theming)
  • Style questions (project-specific)reference/style-patterns.md (Kotlin rules enforced in review)
  • Style questions (general)docs/STYLE_AND_BEST_PRACTICES.md

Core Principles

  • Priority order: Security → Correctness → Breaking Changes → Performance → Maintainability
  • Appropriate depth: Match review rigor to change complexity and risk
  • Specific references: Always use file:line_number format for precise location
  • Actionable feedback: Say what to do and why, not just what's wrong
  • Efficient reviews: Use multi-pass strategy, skip what's not relevant
  • Android patterns: Validate MVVM, Hilt DI, Compose conventions, Kotlin idioms

来自 bitwarden 的更多技能

analyzing-git-sessions
bitwarden
分析指定时间范围或提交区间内的Git提交与变更,生成结构化摘要,用于代码审查、回顾、工作日志或会话记录等场景。
official
figma-to-angular
bitwarden
该技能将Figma设计规范转化为在Bitwarden Clients单体仓库中完全实现的Angular组件,并附带Storybook故事。输出结果应在视觉上与设计一致,同时遵循所有代码库约定。
official
agent-access
bitwarden
通过aac从用户的Bitwarden保管库中检索登录凭据、API密钥和机密(用户名、密码、TOTP)。当您需要凭据来登录…时使用。
official
action-audit
bitwarden
Audit GitHub Actions action usage across an org. Searches for a specific action (incident mode) or sweeps all workflow files for non-compliant action…
official
action-remediate
bitwarden
Remediate GitHub Actions action findings identified by the action-audit skill. Applies the appropriate fix per action type — `@main` ref for internal…
official
analyzing-code-security
bitwarden
此技能应在用户要求“分析代码中的安全问题”、“检查OWASP漏洞”、“对照CWE Top 25审查代码”、“查找…”时使用。
official
applying-bitwarden-branding
bitwarden
Apply Bitwarden brand standards — logo usage, color palette, typography, iconography, and capitalization rules — grounded in bitwarden.com/brand and the…
official
architecting-solutions
bitwarden
在团队层面进行解决方案架构设计,同时与Bitwarden的整体架构保持一致性。涵盖安全思维、架构判断力、……
official