code-review

作者: microsoft

從多重角度審查程式碼變更,包含上下文引導、深度分層嚴謹性,以及結構化發現輸出。

npx skills add https://github.com/microsoft/hve-core --skill code-review

Code Review Skill Entry

This SKILL.md is the entrypoint for the Code Review skill.

The skill provides a reusable review workflow for pull requests, branch diffs, and local changes across functional, standards, accessibility, security, and readiness perspectives. It separates the review target and profile from perspective and depth selection, and centralizes change-brief preparation, severity normalization, and output contracts so review agents stay thin and consistent.

Shared principles

Review work should stay anchored in evidence and should avoid premature conclusions. Keep the review grounded in file and line evidence, use proportional depth based on risk, read the full diff range before narrowing, and keep factual orientation separate from structured findings.

Normative references

  1. Output Formats: reporting structure, merged report skeleton, and persisted artifact contract.
  2. Severity Taxonomy: severity levels, verdict normalization, and risk classification.
  3. Lens Checklists: perspective-specific review questions for functional, standards, accessibility, security, and readiness reviews.
  4. Context Bootstrap: Tier 0 procedure for proving the change surface, drafting a change brief, and scoping hotspots.
  5. Depth Tiers: basic, standard, and comprehensive verification rigor dials.
  6. Walkthrough Protocol: firm orientation floor, full-diff reading contract, and Register 1 narrative guidance.
  7. Dispatch Loop: human-steered dispatch board, manifest schema, and walk-back loop contract.
  8. Emission Modes: capability-gated dual-mode emission and persisted emission record.
  9. Cross-Skill Forks: specialist review registry and package-aware gating for follow-up reviews.
  10. Review Targets and Profiles: target resolution, profile expansion, task serialization, and emission identity.
  11. Change-Risk Evidence Checklist: advisory evidence categories for selecting review depth with human confirmation.

Skill layout

  • SKILL.md: this file (skill entrypoint).
  • references/: durable review knowledge documents.
    • output-formats.md: output schema, report skeleton, and persistence behavior.
    • severity-taxonomy.md: severity and verdict normalization model.
    • lens-checklists.md: per-perspective review checklists.
    • context-bootstrap.md: Tier 0 context bootstrap and human-scoping workflow.
    • depth-tiers.md: Tier 1/2/3 verification-depth guidance.
    • walkthrough-protocol.md: orientation-first walkthrough contract and Register 1 narrative expectations.
    • dispatch-loop.md: dispatch board, manifest schema, and walk-back loop.
    • emission-modes.md: native and canonical emission strategies.
    • cross-skill-forks.md: specialist review registry and gating rules.
    • review-targets.md: review target, profile, and task-state rules.
    • change-risk-model.md — advisory evidence checklist for selecting review depth with human confirmation.

來自 microsoft 的更多技能

oss-growth
microsoft
開源增長駭客角色
agent-framework-azure-ai-py
microsoft
使用Microsoft Agent Framework Python SDK(agent-framework-azure-ai)构建Azure AI Foundry代理。适用于使用AzureAIAgentsProvider创建持久化代理、使用托管工具(代码解释器、文件搜索、网络搜索)、集成MCP服务器、管理对话线程或实现流式响应。涵盖函数工具、结构化输出和多工具代理。
development
airunway-aks-setup
microsoft
在AKS上設定AI Runway——從裸叢集到執行模型。涵蓋叢集驗證、控制器安裝、GPU評估、供應商設定及首次部署。時機:「設定AI Runway」、「上線AKS叢集」、「安裝AI Runway」、「airunway設定」、「部署模型至AKS」、「在AKS上進行GPU推論」、「在AKS上設定KAITO」、「在AKS上執行LLM」、「在AKS上使用vLLM」、「在AKS上設定模型服務」、「AI Runway控制器」。
devops
appinsights-instrumentation
microsoft
使用Azure Application Insights檢測Web應用程式的指南。提供遙測模式、SDK設定與組態參考。適用時機:如何檢測應用程式、App Insights SDK、遙測模式、什麼是App Insights、Application Insights指南、檢測範例、APM最佳實踐。
devops
applicationinsights-web-ts
microsoft
使用Application Insights JavaScript SDK(@microsoft/applicationinsights-web)為瀏覽器/Web應用程式進行檢測。適用於真實使用者監控(RUM)——頁面檢視、點擊、AJAX/fetch依賴、例外、自訂事件,以及與後端OpenTelemetry追蹤關聯的瀏覽器端GenAI代理追蹤。涵蓋SDK載入器指令碼與npm設定、框架擴充(React、React Native、Angular)、點擊分析、遙測初始化器,以及從瀏覽器發出的代理/工具/模型span的OTel GenAI語意慣例。
devops
azure-ai-anomalydetector-java
microsoft
使用適用於 Java 的 Azure AI 異常偵測器 SDK 建置異常偵測應用程式。在實作單變量/多變量異常偵測、時間序列分析或 AI 驅動監控時使用。
development
azure-ai-language-conversations-py
microsoft
使用 azure-ai-language-conversations Python SDK 實作對話語言理解(CLU)。當使用 ConversationAnalysisClient 分析對話意圖與實體、建置 NLP 功能,或將語言理解整合至應用程式時使用。
development
azure-ai-ml-py
microsoft
Azure Machine Learning SDK v2 for Python。用於機器學習工作區、作業、模型、資料集、計算資源與管線。 觸發詞:「azure-ai-ml」、「MLClient」、「workspace」、「model registry」、「training jobs」、「datasets」。
development