OC Code Review

提供代码安全、性能、质量与可维护性四维度全面审查，评分并生成改进建议与详细报告。

This skill looks like a useful code-review helper, but it currently has mismatches between what it says it will do and what it declares it needs. Before installing or running it: 1) Confirm which host tools it will call (git, gh) and whether you are comfortable allowing the agent to run those commands; 2) Do not provide GitHub/Feishu tokens unless you trust the skill — ask the author to declare required env vars and justify each; 3) Be cautious when allowing the skill to read local file paths or PRs — run it in a restricted/sandboxed environment or with limited-scope tokens first; 4) If you expect to use Feishu or web fetching, verify how data fetched will be handled and stored; 5) Prefer an updated metadata manifest that lists required binaries and credentials (or explicitly states none are needed) so the permission surface is clear. If the author can explain/fix the missing requirements, the skill appears coherent and not malicious.

Type: OpenClaw Skill Name: oc-code-review Version: 1.0.0 The skill bundle is a legitimate tool for performing code reviews across security, performance, and quality dimensions. It includes utility scripts (analyze-metrics.py and compare-complexity.py) that perform basic static analysis using regex, and provides comprehensive checklists for the agent to follow. While the instructions in SKILL.md permit the use of powerful tools like 'exec' for git commands and 'web_fetch' for retrieving code, these capabilities are strictly aligned with the stated purpose of auditing codebases and pull requests.