code-review

作者: microsoft

从多个角度审查代码变更,采用上下文引导、深度层次的严谨性和结构化发现输出。

npx skills add https://github.com/microsoft/hve-core --skill code-review

Code Review Skill Entry

This SKILL.md is the entrypoint for the Code Review skill.

The skill provides a reusable review workflow for pull requests, branch diffs, and local changes across functional, standards, accessibility, security, and readiness perspectives. It separates the review target and profile from perspective and depth selection, and centralizes change-brief preparation, severity normalization, and output contracts so review agents stay thin and consistent.

Shared principles

Review work should stay anchored in evidence and should avoid premature conclusions. Keep the review grounded in file and line evidence, use proportional depth based on risk, read the full diff range before narrowing, and keep factual orientation separate from structured findings.

Normative references

  1. Output Formats: reporting structure, merged report skeleton, and persisted artifact contract.
  2. Severity Taxonomy: severity levels, verdict normalization, and risk classification.
  3. Lens Checklists: perspective-specific review questions for functional, standards, accessibility, security, and readiness reviews.
  4. Context Bootstrap: Tier 0 procedure for proving the change surface, drafting a change brief, and scoping hotspots.
  5. Depth Tiers: basic, standard, and comprehensive verification rigor dials.
  6. Walkthrough Protocol: firm orientation floor, full-diff reading contract, and Register 1 narrative guidance.
  7. Dispatch Loop: human-steered dispatch board, manifest schema, and walk-back loop contract.
  8. Emission Modes: capability-gated dual-mode emission and persisted emission record.
  9. Cross-Skill Forks: specialist review registry and package-aware gating for follow-up reviews.
  10. Review Targets and Profiles: target resolution, profile expansion, task serialization, and emission identity.
  11. Change-Risk Evidence Checklist: advisory evidence categories for selecting review depth with human confirmation.

Skill layout

  • SKILL.md: this file (skill entrypoint).
  • references/: durable review knowledge documents.
    • output-formats.md: output schema, report skeleton, and persistence behavior.
    • severity-taxonomy.md: severity and verdict normalization model.
    • lens-checklists.md: per-perspective review checklists.
    • context-bootstrap.md: Tier 0 context bootstrap and human-scoping workflow.
    • depth-tiers.md: Tier 1/2/3 verification-depth guidance.
    • walkthrough-protocol.md: orientation-first walkthrough contract and Register 1 narrative expectations.
    • dispatch-loop.md: dispatch board, manifest schema, and walk-back loop.
    • emission-modes.md: native and canonical emission strategies.
    • cross-skill-forks.md: specialist review registry and gating rules.
    • review-targets.md: review target, profile, and task-state rules.
    • change-risk-model.md — advisory evidence checklist for selecting review depth with human confirmation.

来自 microsoft 的更多技能

oss-growth
microsoft
OSS增长黑客角色
agent-framework-azure-ai-py
microsoft
使用Microsoft Agent Framework Python SDK(agent-framework-azure-ai)构建Azure AI Foundry代理。在创建使用AzureAIAgentsProvider的持久化代理、使用托管工具(代码解释器、文件搜索、网络搜索)、集成MCP服务器、管理对话线程或实现流式响应时使用。涵盖函数工具、结构化输出和多工具代理。
development
airunway-aks-setup
microsoft
在AKS上设置AI Runway——从裸集群到运行模型。涵盖集群验证、控制器安装、GPU评估、提供商设置和首次部署。适用场景:“设置AI Runway”、“接入AKS集群”、“安装AI Runway”、“airunway设置”、“将模型部署到AKS”、“在AKS上进行GPU推理”、“在AKS上配置KAITO”、“在AKS上运行LLM”、“在AKS上使用vLLM”、“在AKS上设置模型服务”、“AI Runway控制器”。
devops
appinsights-instrumentation
microsoft
使用Azure Application Insights对Web应用进行插桩的指南。提供遥测模式、SDK设置和配置参考。适用场景:如何对应用进行插桩、App Insights SDK、遥测模式、什么是App Insights、Application Insights指南、插桩示例、APM最佳实践。
devops
applicationinsights-web-ts
microsoft
使用Application Insights JavaScript SDK(@microsoft/applicationinsights-web)为浏览器/Web应用添加检测。用于真实用户监控(RUM)——页面视图、点击、AJAX/fetch依赖项、异常、自定义事件,以及与后端OpenTelemetry追踪关联的浏览器端GenAI代理追踪。涵盖SDK加载器脚本和npm设置、框架扩展(React、React Native、Angular)、点击分析、遥测初始化器,以及从浏览器发出的代理/工具/模型跨度所遵循的OTel GenAI语义约定。
devops
azure-ai-anomalydetector-java
microsoft
使用适用于 Java 的 Azure AI 异常检测器 SDK 构建异常检测应用程序。在实现单变量/多变量异常检测、时间序列分析或 AI 驱动的监控时使用。
development
azure-ai-language-conversations-py
microsoft
使用azure-ai-language-conversations Python SDK实现对话语言理解(CLU)。当使用ConversationAnalysisClient分析对话意图和实体、构建NLP功能或将语言理解集成到应用程序中时使用。
development
azure-ai-ml-py
microsoft
Azure Machine Learning SDK v2 for Python。用于机器学习工作区、作业、模型、数据集、计算资源和管道。 触发词:“azure-ai-ml”、“MLClient”、“工作区”、“模型注册表”、“训练作业”、“数据集”。
development