← 返回 Skills 市场
183
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install code-review-ai
功能描述
代码审查助手 - 自动分析代码，提供审查意见、性能优化建议、安全漏洞检测。支持多种编程语言，生成详细的代码审查报告。
使用说明 (SKILL.md)
代码审查助手
自动代码审查，提升代码质量。
功能特点
- 🔍 自动审查 - 分析代码结构和风格
- ⚡ 性能优化 - 识别性能瓶颈
- 🔒 安全检测 - 发现潜在安全漏洞
- 📊 质量报告 - 生成详细审查报告
- 🛠️ 多语言支持 - 支持 JS/Python/Go/Java 等
使用方法
node scripts/review.mjs --file ./src/app.js
License
MIT
安全使用建议
This package claims to be a Node-based code reviewer but the bundle lacks the scripts it tells you to run and has no install recipe. Before installing or running anything: verify the upstream GitHub repository and inspect the actual 'scripts/review.mjs' (or other runtime files) to see what they do; prefer skills that include their runtime or provide a clear, auditable install step; do not allow the agent to fetch or run remote code without reviewing it first. Also be aware a code-review tool will read your project files — avoid giving it secrets or sensitive code until you confirm it does not exfiltrate data.
功能分析
Type: OpenClaw Skill
Name: code-review-ai
Version: 1.0.0
The provided files (_meta.json, SKILL.md, and README.md) contain standard metadata and documentation for a code review tool. There are no signs of malicious intent, data exfiltration, or prompt injection in the instructions. While the primary execution script (scripts/review.mjs) mentioned in the documentation was not provided for analysis, the available content is consistent with its stated purpose.
能力评估
Purpose & Capability
The name/description promise a Node-based code-review tool. It declares a dependency on the 'node' binary which is consistent, but the skill bundle contains no scripts, modules, or install steps that would implement the promised functionality. That mismatch (claims to run 'node scripts/review.mjs' but provides no such file or an install mechanism to obtain it) is incoherent.
Instruction Scope
SKILL.md and README instruct the agent/user to run 'node scripts/review.mjs' and use 'clawhub install', and to analyze project files (expected for a reviewer). However, because the runtime script is not included, it is unclear whether any implementation would read only project files or also access/send other data. The instructions give broad discretion (run a script that isn't present), which is a security risk until the actual script is inspected.
Install Mechanism
There is no install spec. The README mentions 'clawhub install' and a GitHub homepage, but the registry bundle contains only documentation files and no code. Without a defined, verifiable install source (e.g., a known release or included scripts), the agent or user might need to fetch code from an external location — which increases risk because the fetched code is not part of this package for review.
Credentials
The skill requests only the 'node' binary and declares no environment variables, credentials, or config paths. That is proportionate to a local code-analysis tool.
Persistence & Privilege
always is false and there is no indication the skill requests persistent/privileged presence or modifies other skills. Autonomous invocation is allowed (platform default) but not combined with other high-privilege requests.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install code-review-ai - 安装完成后，直接呼叫该 Skill 的名称或使用
/code-review-ai触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: AI-powered code review assistant
元数据
常见问题
AI代码审查助手 是什么？
代码审查助手 - 自动分析代码，提供审查意见、性能优化建议、安全漏洞检测。支持多种编程语言，生成详细的代码审查报告。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 183 次。
如何安装 AI代码审查助手？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install code-review-ai」即可一键安装，无需额外配置。
AI代码审查助手 是免费的吗？
是的，AI代码审查助手 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
AI代码审查助手 支持哪些平台？
AI代码审查助手 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 AI代码审查助手？
由 ryan-wuxl（@ryan-wuxl）开发并维护，当前版本 v1.0.0。
推荐 Skills