@humanbased/crosscheck 1.2.0 → 1.3.0-beta.81

package/README.zh.md

@@ -176,4 +176,4 @@ post_review:
 
 ## 许可证
 
-[MIT](./LICENSE) — Copyright (c) 2025–2026 Humanbased PTE LTD.
+[MIT](./LICENSE) — Copyright (c) 2025–2026 Humanbased AI PTE LTD.

package/assets/linear-comment.svg

@@ -0,0 +1,18 @@
+<svg xmlns='http://www.w3.org/2000/svg' width='760' height='270' viewBox='0 0 760 270' font-family='-apple-system, BlinkMacSystemFont, Inter, Segoe UI, sans-serif'>
+<rect width='760' height='270' rx='10' fill='#191b22'/>
+<rect x='0.5' y='0.5' width='759' height='269' rx='10' fill='none' stroke='#2b2f3a'/>
+<clipPath id='c'><circle cx='38' cy='42' r='16'/></clipPath>
+<image href='data:image/png;base64,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' x='22' y='26' width='32' height='32' clip-path='url(#c)'/>
+<text x='68' y='40' fill='#e6e8ee' font-size='14.5' font-weight='600'>crosscheck/review</text>
+<rect x='200' y='28' width='34' height='17' rx='4' fill='#2f3550'/>
+<text x='217' y='40.5' fill='#93a4ff' font-size='10.5' font-weight='600' text-anchor='middle'>APP</text>
+<text x='246' y='40' fill='#767c8b' font-size='12.5'>commented just now</text>
+<line x1='22' y1='62' x2='738' y2='62' stroke='#252932'/>
+<text x='22' y='90' fill='#8b93a3' font-size='13'>🤖 crosscheck/review · crosscheck · <tspan fill='#b6bdcc'>gpt-5.6-terra</tspan></text>
+<text x='22' y='126' font-size='14.5'><tspan fill='#e5c07b' font-weight='700'>NEEDS_WORK</tspan><tspan fill='#c3c9d6'> — codex (gpt-5.6-terra) review of </tspan><tspan fill='#6ea8fe' text-decoration='underline'>feat: add rate limiting to the public API</tspan></text>
+<text x='22' y='162' fill='#c3c9d6' font-size='13.5'>2 blocking findings — unbounded retry loop in <tspan font-family='ui-monospace,Menlo,monospace' fill='#e06c75' font-size='12.5'>limiter.ts:88</tspan>, and the 429</text>
+<text x='22' y='183' fill='#c3c9d6' font-size='13.5'>response omits <tspan font-family='ui-monospace,Menlo,monospace' fill='#e06c75' font-size='12.5'>Retry-After</tspan>.</text>
+<line x1='22' y1='210' x2='738' y2='210' stroke='#252932'/>
+<text x='22' y='232' fill='#5c6373' font-size='11.5' font-family='ui-monospace,Menlo,monospace'>&lt;!-- crosscheck: origin=claude reviewer=codex model=gpt-5.6-terra type=review …  --&gt;</text>
+<text x='738' y='232' fill='#4a505e' font-size='11' text-anchor='end'>hidden in rendered view</text>
+</svg>

package/assets/linear-onboard.svg

@@ -0,0 +1,30 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="776" height="490" viewBox="0 0 776 490" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" font-size="13.5">
+  <rect width="776" height="490" rx="8" fill="#21252b"/>
+  <rect width="776" height="34" rx="8" fill="#2c313a"/>
+  <rect y="26" width="776" height="8" fill="#2c313a"/>
+  <circle cx="20" cy="17" r="6" fill="#ff5f58"/>
+  <circle cx="40" cy="17" r="6" fill="#ffbd2e"/>
+  <circle cx="60" cy="17" r="6" fill="#18c132"/>
+  <text x="388" y="22" fill="#8b919b" font-size="12" text-anchor="middle">crosscheck onboard</text>
+<text x="18.0" y="52" fill="#c8ccd4" textLength="335.4" lengthAdjust="spacing" font-weight="600" xml:space="preserve">Step 9.5 — Linear write-back (optional)</text>
+<text x="35.2" y="72" fill="#c8ccd4" textLength="533.2" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Post the review verdict onto the Linear issue a PR belongs to.</text>
+
+<text x="35.2" y="112" fill="#c8ccd4" textLength="326.8" lengthAdjust="spacing" xml:space="preserve">[1] off           — leave Linear alone</text>
+<text x="35.2" y="132" fill="#c8ccd4" textLength="507.4" lengthAdjust="spacing" xml:space="preserve">[2] api key       — works immediately. Comments post under </text><text x="542.6" y="132" fill="#c8ccd4" textLength="197.8" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">your own Linear account</text>
+<text x="35.2" y="152" fill="#c8ccd4" textLength="318.2" lengthAdjust="spacing" xml:space="preserve">[3] workspace app — comments post as </text><text x="353.4" y="152" fill="#56b6c2" textLength="86.0" lengthAdjust="spacing" xml:space="preserve">crosscheck</text><text x="448.0" y="152" fill="#c8ccd4" textLength="215.0" lengthAdjust="spacing" xml:space="preserve">itself, with its own icon</text>
+<text x="207.2" y="172" fill="#c8ccd4" textLength="507.4" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">one app per workspace, ~5 min, needs Linear settings access</text>
+
+<text x="35.2" y="212" fill="#c8ccd4" textLength="103.2" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Current: off</text>
+
+<text x="35.2" y="252" fill="#c8ccd4" textLength="111.8" lengthAdjust="spacing" xml:space="preserve">Choice [1]: 3</text>
+<text x="35.2" y="272" fill="#c8ccd4" textLength="653.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Your Linear team key prefixes, so refs like ENG-42 in a branch name resolve.</text>
+<text x="35.2" y="292" fill="#c8ccd4" textLength="567.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Comma-separated. Leave blank to only follow full linear.app links.</text>
+<text x="35.2" y="312" fill="#c8ccd4" textLength="111.8" lengthAdjust="spacing" xml:space="preserve">team keys: IN</text>
+
+<text x="35.2" y="352" fill="#c8ccd4" textLength="576.2" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Create the app, then set LINEAR_CLIENT_ID and LINEAR_CLIENT_SECRET.</text>
+<text x="35.2" y="372" fill="#c8ccd4" textLength="309.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Walkthrough: docs/linear-identity.md</text>
+
+<text x="18.0" y="412" fill="#c8ccd4" textLength="283.8" lengthAdjust="spacing" font-weight="600" xml:space="preserve">Step 10 — review and write config</text>
+
+<text x="35.2" y="452" fill="#c8ccd4" textLength="111.8" lengthAdjust="spacing" xml:space="preserve">linear       </text><text x="147.0" y="452" fill="#56b6c2" textLength="154.8" lengthAdjust="spacing" xml:space="preserve">client_credentials</text><text x="310.4" y="452" fill="#c8ccd4" textLength="34.4" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">(IN)</text>
+</svg>

package/assets/linear-status.svg

@@ -0,0 +1,23 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="578" height="350" viewBox="0 0 578 350" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" font-size="13.5">
+  <rect width="578" height="350" rx="8" fill="#21252b"/>
+  <rect width="578" height="34" rx="8" fill="#2c313a"/>
+  <rect y="26" width="578" height="8" fill="#2c313a"/>
+  <circle cx="20" cy="17" r="6" fill="#ff5f58"/>
+  <circle cx="40" cy="17" r="6" fill="#ffbd2e"/>
+  <circle cx="60" cy="17" r="6" fill="#18c132"/>
+  <text x="289" y="22" fill="#8b919b" font-size="12" text-anchor="middle">crosscheck status</text>
+<text x="35.2" y="52" fill="#c8ccd4" textLength="51.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Config</text>
+<text x="52.4" y="72" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">config path           </text><text x="250.2" y="72" fill="#c8ccd4" textLength="206.4" lengthAdjust="spacing" xml:space="preserve">~/.crosscheck/config.yml</text>
+<text x="52.4" y="92" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">mode                  </text><text x="250.2" y="92" fill="#c8ccd4" textLength="103.2" lengthAdjust="spacing" xml:space="preserve">cross-vendor</text>
+<text x="52.4" y="112" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">quality tier          </text><text x="250.2" y="112" fill="#c8ccd4" textLength="68.8" lengthAdjust="spacing" xml:space="preserve">balanced</text>
+<text x="52.4" y="132" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">codex auth            </text><text x="250.2" y="132" fill="#c8ccd4" textLength="103.2" lengthAdjust="spacing" xml:space="preserve">subscription</text>
+<text x="52.4" y="152" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">codex model           </text><text x="250.2" y="152" fill="#c8ccd4" textLength="120.4" lengthAdjust="spacing" xml:space="preserve">auto (by tier)</text>
+<text x="52.4" y="172" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">claude model          </text><text x="250.2" y="172" fill="#c8ccd4" textLength="60.2" lengthAdjust="spacing" xml:space="preserve">default</text>
+<text x="52.4" y="192" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">per-review budget     </text><text x="250.2" y="192" fill="#c8ccd4" textLength="206.4" lengthAdjust="spacing" xml:space="preserve">subscription (unlimited)</text>
+
+<text x="35.2" y="232" fill="#c8ccd4" textLength="51.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">Linear</text>
+<text x="35.2" y="252" fill="#98c379" textLength="17.2" lengthAdjust="spacing" xml:space="preserve">✓</text><text x="61.0" y="252" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">auth mode             </text><text x="258.8" y="252" fill="#c8ccd4" textLength="60.2" lengthAdjust="spacing" xml:space="preserve">api_key</text>
+<text x="52.4" y="272" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">organization          </text><text x="250.2" y="272" fill="#c8ccd4" textLength="146.2" lengthAdjust="spacing" xml:space="preserve">Inductive Network</text>
+<text x="52.4" y="292" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">writes as             </text><text x="250.2" y="292" fill="#c8ccd4" textLength="180.6" lengthAdjust="spacing" xml:space="preserve">yi@inductive.network </text><text x="430.8" y="292" fill="#c8ccd4" textLength="77.4" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">(api key)</text>
+<text x="52.4" y="312" fill="#c8ccd4" textLength="490.2" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">to post as crosscheck itself, see docs/linear-identity.md</text>
+</svg>

package/assets/linear-test.svg

@@ -0,0 +1,34 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="733" height="570" viewBox="0 0 733 570" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" font-size="13.5">
+  <rect width="733" height="570" rx="8" fill="#21252b"/>
+  <rect width="733" height="34" rx="8" fill="#2c313a"/>
+  <rect y="26" width="733" height="8" fill="#2c313a"/>
+  <circle cx="20" cy="17" r="6" fill="#ff5f58"/>
+  <circle cx="40" cy="17" r="6" fill="#ffbd2e"/>
+  <circle cx="60" cy="17" r="6" fill="#18c132"/>
+  <text x="366.5" y="22" fill="#8b919b" font-size="12" text-anchor="middle">crosscheck linear-test</text>
+
+<text x="18.0" y="72" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" font-weight="600" xml:space="preserve">crosscheck linear-test</text>
+
+<text x="18.0" y="112" fill="#98c379" textLength="17.2" lengthAdjust="spacing" xml:space="preserve">✓</text><text x="43.8" y="112" fill="#c8ccd4" textLength="404.2" lengthAdjust="spacing" xml:space="preserve">identity      api_key — writes as you@acme.com </text><text x="448.0" y="112" fill="#c8ccd4" textLength="77.4" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">(api key)</text>
+<text x="18.0" y="132" fill="#98c379" textLength="17.2" lengthAdjust="spacing" xml:space="preserve">✓</text><text x="43.8" y="132" fill="#c8ccd4" textLength="154.8" lengthAdjust="spacing" xml:space="preserve">workspace     Acme</text>
+<text x="18.0" y="152" fill="#98c379" textLength="17.2" lengthAdjust="spacing" xml:space="preserve">✓</text><text x="43.8" y="152" fill="#c8ccd4" textLength="189.2" lengthAdjust="spacing" xml:space="preserve">reference     IN-2269 </text><text x="233.0" y="152" fill="#c8ccd4" textLength="120.4" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">(via argument)</text>
+<text x="18.0" y="172" fill="#98c379" textLength="17.2" lengthAdjust="spacing" xml:space="preserve">✓</text><text x="43.8" y="172" fill="#c8ccd4" textLength="576.2" lengthAdjust="spacing" xml:space="preserve">lookup        https://linear.app/acme/issue/IN-2269/tiered-identity</text>
+<text x="18.0" y="192" fill="#98c379" textLength="17.2" lengthAdjust="spacing" xml:space="preserve">✓</text><text x="43.8" y="192" fill="#c8ccd4" textLength="352.6" lengthAdjust="spacing" xml:space="preserve">filter        NEEDS_WORK is in comment_on</text>
+
+<text x="35.2" y="232" fill="#c8ccd4" textLength="653.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">── comment that would be posted ────────────────────────────────────────────</text>
+
+<text x="35.2" y="272" fill="#c8ccd4" textLength="309.6" lengthAdjust="spacing" xml:space="preserve">🤖 crosscheck/review · gpt-5.6-terra</text>
+
+<text x="35.2" y="312" fill="#c8ccd4" textLength="576.2" lengthAdjust="spacing" xml:space="preserve">**NEEDS_WORK** — codex (gpt-5.6-terra) review of [example: a sample</text>
+<text x="35.2" y="332" fill="#c8ccd4" textLength="344.0" lengthAdjust="spacing" xml:space="preserve">PR](https://github.com/acme/app/pull/42)</text>
+
+<text x="35.2" y="372" fill="#c8ccd4" textLength="473.0" lengthAdjust="spacing" xml:space="preserve">Example summary — a real run puts the review text here.</text>
+
+<text x="35.2" y="412" fill="#c8ccd4" textLength="662.2" lengthAdjust="spacing" xml:space="preserve">&lt;!-- crosscheck: origin=claude reviewer=codex model=gpt-5.6-terra type=review</text>
+<text x="35.2" y="432" fill="#c8ccd4" textLength="524.6" lengthAdjust="spacing" xml:space="preserve">round=1 verdict=NEEDS_WORK service=crosscheck sha=abc1234 --&gt;</text>
+
+<text x="35.2" y="472" fill="#c8ccd4" textLength="653.6" lengthAdjust="spacing" opacity="0.55" xml:space="preserve">────────────────────────────────────────────────────────────────────────────</text>
+
+<text x="18.0" y="512" fill="#98c379" textLength="369.8" lengthAdjust="spacing" xml:space="preserve">✓ Nothing was posted — this was a dry run.</text>
+
+</svg>

package/assets/skills/code-review/.crosscheck-skill.json

@@ -0,0 +1,9 @@
+{
+  "schemaVersion": 1,
+  "name": "code-review",
+  "author": "mattpocock",
+  "license": "MIT",
+  "source": "https://github.com/mattpocock/skills",
+  "revision": "2ab958093e83e0ec752e6c1c5932da465bf23e0c",
+  "integrity": "sha256:59eecd403b82ae0823cad21aa585efa62ac6d00f800137dee4d673b6092c20c6"
+}

package/assets/skills/code-review/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Matt Pocock
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/assets/skills/code-review/SKILL.md

@@ -0,0 +1,89 @@
+---
+name: code-review
+description: Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes — Standards (does the code follow this repo's documented coding standards?) and Spec (does the code match what the originating issue/PRD asked for?). Runs both reviews in parallel sub-agents and reports them side by side. Use when the user wants to review a branch, a PR, work-in-progress changes, or asks to "review since X".
+---
+
+Two-axis review of the diff between `HEAD` and a fixed point the user supplies:
+
+- **Standards** — does the code conform to this repo's documented coding standards?
+- **Spec** — does the code faithfully implement the originating issue / PRD / spec?
+
+Both axes run as **parallel sub-agents** so they don't pollute each other's context, then this skill aggregates their findings.
+
+The issue tracker should have been provided to you — run `/setup-matt-pocock-skills` if `docs/agents/issue-tracker.md` is missing.
+
+## Process
+
+### 1. Pin the fixed point
+
+Whatever the user said is the fixed point — a commit SHA, branch name, tag, `main`, `HEAD~5`, etc. If they didn't specify one, ask for it.
+
+Capture the diff command once: `git diff <fixed-point>...HEAD` (three-dot, so the comparison is against the merge-base). Also note the list of commits via `git log <fixed-point>..HEAD --oneline`.
+
+Before going further, confirm the fixed point resolves (`git rev-parse <fixed-point>`) and the diff is non-empty. A bad ref or empty diff should fail here — not inside two parallel sub-agents.
+
+### 2. Identify the spec source
+
+Look for the originating spec, in this order:
+
+1. Issue references in the commit messages (`#123`, `Closes #45`, GitLab `!67`, etc.) — fetch via the workflow in `docs/agents/issue-tracker.md`.
+2. A path the user passed as an argument.
+3. A PRD/spec file under `docs/`, `specs/`, or `.scratch/` matching the branch name or feature.
+4. If nothing is found, ask the user where the spec is. If they say there isn't one, the **Spec** sub-agent will skip and report "no spec available".
+
+### 3. Identify the standards sources
+
+Anything in the repo that documents how code should be written, such as `CODING_STANDARDS.md` or `CONTRIBUTING.md`.
+
+On top of whatever the repo documents, the Standards axis always carries the **smell baseline** below — a fixed set of Fowler code smells (_Refactoring_, ch.3) that applies even when a repo documents nothing. Two rules bind it:
+
+- **The repo overrides.** A documented repo standard always wins; where it endorses something the baseline would flag, suppress the smell.
+- **Always a judgement call.** Each smell is a labelled heuristic ("possible Feature Envy"), never a hard violation — and, like any standard here, skip anything tooling already enforces.
+
+Each smell reads *what it is* → *how to fix*; match it against the diff:
+
+- **Mysterious Name** — a function, variable, or type whose name doesn't reveal what it does or holds. → rename it; if no honest name comes, the design's murky.
+- **Duplicated Code** — the same logic shape appears in more than one hunk or file in the change. → extract the shared shape, call it from both.
+- **Feature Envy** — a method that reaches into another object's data more than its own. → move the method onto the data it envies.
+- **Data Clumps** — the same few fields or params keep travelling together (a type wanting to be born). → bundle them into one type, pass that.
+- **Primitive Obsession** — a primitive or string standing in for a domain concept that deserves its own type. → give the concept its own small type.
+- **Repeated Switches** — the same `switch`/`if`-cascade on the same type recurs across the change. → replace with polymorphism, or one map both sites share.
+- **Shotgun Surgery** — one logical change forces scattered edits across many files in the diff. → gather what changes together into one module.
+- **Divergent Change** — one file or module is edited for several unrelated reasons. → split so each module changes for one reason.
+- **Speculative Generality** — abstraction, parameters, or hooks added for needs the spec doesn't have. → delete it; inline back until a real need shows.
+- **Message Chains** — long `a.b().c().d()` navigation the caller shouldn't depend on. → hide the walk behind one method on the first object.
+- **Middle Man** — a class or function that mostly just delegates onward. → cut it, call the real target direct.
+- **Refused Bequest** — a subclass or implementer that ignores or overrides most of what it inherits. → drop the inheritance, use composition.
+
+### 4. Spawn both sub-agents in parallel
+
+Send a single message with two `Agent` tool calls. Use the `general-purpose` subagent for both.
+
+**Standards sub-agent prompt** — include:
+
+- The full diff command and commit list.
+- The list of standards-source files you found in step 3, **plus the smell baseline from step 3** pasted in full — the sub-agent has no other access to it.
+- The brief: "Report — per file/hunk where relevant — (a) every place the diff violates a documented standard: cite the standard (file + the rule); and (b) any baseline smell you spot: name it and quote the hunk. Distinguish hard violations from judgement calls — documented-standard breaches can be hard, but baseline smells are always judgement calls, and a documented repo standard overrides the baseline. Skip anything tooling enforces. Under 400 words."
+
+**Spec sub-agent prompt** — include:
+
+- The diff command and commit list.
+- The path or fetched contents of the spec.
+- The brief: "Report: (a) requirements the spec asked for that are missing or partial; (b) behaviour in the diff that wasn't asked for (scope creep); (c) requirements that look implemented but where the implementation looks wrong. Quote the spec line for each finding. Under 400 words."
+
+If the spec is missing, skip the Spec sub-agent and note this in the final report.
+
+### 5. Aggregate
+
+Present the two reports under `## Standards` and `## Spec` headings, verbatim or lightly cleaned. Do **not** merge or rerank findings — the two axes are deliberately separate (see _Why two axes_).
+
+End with a one-line summary: total findings per axis, and the worst issue _within each axis_ (if any). Don't pick a single winner across axes — that's the reranking the separation exists to prevent.
+
+## Why two axes
+
+A change can pass one axis and fail the other:
+
+- Code that follows every standard but implements the wrong thing → **Standards pass, Spec fail.**
+- Code that does exactly what the issue asked but breaks the project's conventions → **Spec pass, Standards fail.**
+
+Reporting them separately stops one axis from masking the other.

package/assets/skills/code-review/agents/openai.yaml

@@ -0,0 +1,3 @@
+interface:
+  display_name: "Code Review"
+  short_description: "Review a diff on standards and spec"

package/assets/skills/code-review-skill/.crosscheck-skill.json

@@ -0,0 +1,9 @@
+{
+  "schemaVersion": 1,
+  "name": "code-review-skill",
+  "author": "awesome-skills",
+  "license": "MIT",
+  "source": "https://github.com/awesome-skills/code-review-skill",
+  "revision": "95c707b999295f6c8ee2d0d3d1c61cc0c2e1a52c",
+  "integrity": "sha256:27a9e6b964e270ded1bb11c7bab31fccc7ed76c7a9a86fd80e330553c8677d75"
+}

package/assets/skills/code-review-skill/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 awesome-skills
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/assets/skills/code-review-skill/SKILL.md

@@ -0,0 +1,231 @@
+---
+name: code-review-skill
+description: |
+  Provides comprehensive code review guidance for React 19, Vue 3, Angular 17+, Svelte 5,
+  Rust, TypeScript, Java, Java 8, PHP, Ruby, Rails, Python, Django, FastAPI, Go, C#/.NET, Kotlin, Swift,
+  NestJS, C/C++, Zig, CSS/Less/Sass, Qt, and more.
+  Covers architecture review, performance review, security audit, code quality anti-patterns,
+  and common bugs across all ecosystems.
+  Use when: reviewing pull requests, conducting PR reviews, code review, reviewing code changes,
+  establishing review standards, mentoring developers, architecture reviews, security audits,
+  performance reviews, checking code quality, finding bugs, giving feedback on code.
+allowed-tools:
+  - Read
+  - Grep
+  - Glob
+  - Bash      # 运行 lint/test/build 命令验证代码质量
+  - WebFetch  # 查阅最新文档和最佳实践
+---
+
+# Code Review Skill
+
+Transform code reviews from gatekeeping to knowledge sharing through constructive feedback, systematic analysis, and collaborative improvement.
+
+## When to Use This Skill
+
+- Reviewing pull requests and code changes
+- Establishing code review standards for teams
+- Mentoring junior developers through reviews
+- Conducting architecture reviews
+- Creating review checklists and guidelines
+- Improving team collaboration
+- Reducing code review cycle time
+- Maintaining code quality standards
+
+## Core Principles
+
+### 1. The Review Mindset
+
+**Goals of Code Review:**
+- Catch bugs and edge cases
+- Ensure code maintainability
+- Share knowledge across team
+- Enforce coding standards
+- Improve design and architecture
+- Build team culture
+
+**Not the Goals:**
+- Show off knowledge
+- Nitpick formatting (use linters)
+- Block progress unnecessarily
+- Rewrite to your preference
+
+### 2. Effective Feedback
+
+**Good Feedback is:**
+- Specific and actionable
+- Educational, not judgmental
+- Focused on the code, not the person
+- Balanced (praise good work too)
+- Prioritized (critical vs nice-to-have)
+
+```markdown
+❌ Bad: "This is wrong."
+✅ Good: "This could cause a race condition when multiple users
+         access simultaneously. Consider using a mutex here."
+
+❌ Bad: "Why didn't you use X pattern?"
+✅ Good: "Have you considered the Repository pattern? It would
+         make this easier to test. Here's an example: [link]"
+
+❌ Bad: "Rename this variable."
+✅ Good: "[nit] Consider `userCount` instead of `uc` for
+         clarity. Not blocking if you prefer to keep it."
+```
+
+### 3. Review Scope
+
+**What to Review:**
+- Logic correctness and edge cases
+- Security vulnerabilities
+- Performance implications
+- Test coverage and quality
+- Error handling
+- Documentation and comments
+- API design and naming
+- Architectural fit
+
+**What Not to Review Manually:**
+- Code formatting (use Prettier, Black, etc.)
+- Import organization
+- Linting violations
+- Simple typos
+
+## Review Process
+
+### Phase 1: Context Gathering (2-3 minutes)
+
+Before diving into code, understand:
+1. Read PR description and linked issue
+2. Check PR size (>400 lines? Ask to split)
+3. Review CI/CD status (tests passing?)
+4. Understand the business requirement
+5. Note any relevant architectural decisions
+
+> For large diffs, pipe the diff through [`scripts/pr-analyzer.py`](scripts/pr-analyzer.py) (`git diff main...HEAD | python scripts/pr-analyzer.py`) to triage complexity and get a suggested review approach before reading.
+
+### Phase 2: High-Level Review (5-10 minutes)
+
+1. **Architecture & Design** - Does the solution fit the problem?
+   - For significant changes, consult [Architecture Review Guide](reference/architecture-review-guide.md)
+   - Check: SOLID principles, coupling/cohesion, anti-patterns
+2. **Performance Assessment** - Are there performance concerns?
+   - For performance-critical code, consult [Performance Review Guide](reference/performance-review-guide.md)
+   - Check: Algorithm complexity, N+1 queries, memory usage
+3. **File Organization** - Are new files in the right places?
+4. **Testing Strategy** - Are there tests covering edge cases?
+
+### Phase 3: Line-by-Line Review (10-20 minutes)
+
+For each file, check:
+- **Logic & Correctness** - Edge cases, off-by-one, null checks, race conditions
+- **Security** - Input validation, injection risks, XSS, sensitive data
+- **Performance** - N+1 queries, unnecessary loops, memory leaks
+- **Maintainability** - Clear names, single responsibility, comments
+- **Reuse** - Before accepting new code, search for existing utilities/helpers that could replace it. Check adjacent files and shared modules for similar patterns. See [Universal Quality Guide](reference/code-quality-universal.md) for anti-patterns like parameter sprawl, leaky abstractions, nested conditionals, stringly-typed code, TOCTOU, and no-op updates.
+
+### Phase 4: Summary & Decision (2-3 minutes)
+
+1. Summarize key concerns
+2. Highlight what you liked
+3. Make clear decision:
+   - ✅ Approve
+   - 💬 Comment (minor suggestions)
+   - 🔄 Request Changes (must address)
+4. Offer to pair if complex
+
+## Review Techniques
+
+### Technique 1: The Checklist Method
+
+Use checklists for consistent reviews. See [Security Review Guide](reference/security-review-guide.md) for comprehensive security checklist.
+
+### Technique 2: The Question Approach
+
+Instead of stating problems, ask questions:
+
+```markdown
+❌ "This will fail if the list is empty."
+✅ "What happens if `items` is an empty array?"
+
+❌ "You need error handling here."
+✅ "How should this behave if the API call fails?"
+```
+
+### Technique 3: Suggest, Don't Command
+
+Use collaborative language:
+
+```markdown
+❌ "You must change this to use async/await"
+✅ "Suggestion: async/await might make this more readable. What do you think?"
+
+❌ "Extract this into a function"
+✅ "This logic appears in 3 places. Would it make sense to extract it?"
+```
+
+### Technique 4: Differentiate Severity
+
+Use labels to indicate priority:
+
+- 🔴 `[blocking]` - Must fix before merge
+- 🟡 `[important]` - Should fix, discuss if disagree
+- 🟢 `[nit]` - Nice to have, not blocking
+- 💡 `[suggestion]` - Alternative approach to consider
+- 📚 `[learning]` - Educational comment, no action needed
+- 🎉 `[praise]` - Good work, keep it up!
+
+**Severity levels:** 🔴 / 🟡 / 🟢 are the three severity tiers used as the standard across all guides in this skill — 🔴 blocks the merge, 🟡 should be addressed, 🟢 is optional. The remaining markers (💡 / 📚 / 🎉) are non-blocking annotations.
+
+## Language-Specific Guides
+
+根据审查的代码语言，查阅对应的详细指南：
+
+| Language/Framework | Reference File | Key Topics |
+|-------------------|----------------|------------|
+| **React** | [React Guide](reference/react.md) | Hooks, useEffect, React 19 Actions, RSC, Suspense, TanStack Query v5 |
+| **Vue 3** | [Vue Guide](reference/vue.md) | Composition API, 响应性系统, Props/Emits, Watchers, Composables |
+| **Angular 17+** | [Angular Guide](reference/angular.md) | Signals, Standalone, RxJS, Zoneless, 模板优化, 测试, 路由守卫, HttpInterceptor |
+| **Rust** | [Rust Guide](reference/rust.md) | 所有权/借用, Unsafe 审查, 异步代码, 取消安全性, 错误处理 |
+| **TypeScript** | [TypeScript Guide](reference/typescript.md) | 类型安全, async/await, 不可变性, 测试, 模块解析, TS 5.x |
+| **Python** | [Python Guide](reference/python.md) | 可变默认参数, 异常处理, 类属性 |
+| **Django / DRF** | [Django Guide](reference/django.md) | 安全审查, N+1 查询, Serializer 反模式, ViewSet, 异步视图 |
+| **FastAPI** | [FastAPI Guide](reference/fastapi.md) | Depends, Pydantic v2 validation, async correctness, sessions/N+1, auth vs authorization, test-driven verification |
+| **Java** | [Java Guide](reference/java.md) | Java 17/21 新特性, Spring Boot 3, 虚拟线程, Stream/Optional |
+| **Java 8 / Legacy** | [Java 8 Guide](reference/java8.md) | Java 8, Spring Boot 2, javax.*, Stream/Optional, java.time, CompletableFuture |
+| **PHP** | [PHP Guide](reference/php.md) | PHP 8.x type system, PDO, security review, Composer, PHPUnit/PHPStan |
+| **Ruby / Rails** | [Ruby Guide](reference/ruby.md) | Ruby semantics, Rails 8, Active Record, Active Job, security, testing |
+| **C# / .NET** | [C# Guide](reference/csharp.md) | C# 12 特性, 异步编程, EF Core 性能, ASP.NET Core, LINQ |
+| **Go** | [Go Guide](reference/go.md) | 错误处理, goroutine/channel, context, 接口设计 |
+| **Kotlin / Android** | [Kotlin Guide](reference/kotlin.md) | 协程, Flow, Jetpack Compose, 空安全, 内存泄漏, 架构模式 |
+| **Swift / SwiftUI** | [Swift Guide](reference/swift.md) | Optionals, Swift Concurrency, Sendable/actors, SwiftUI property wrappers, value vs reference types, API design |
+| **NestJS** | [NestJS Guide](reference/nestjs.md) | 依赖注入, 分层架构, DTO 验证, Guard/Interceptor, 循环依赖 |
+| **Svelte / SvelteKit** | [Svelte Guide](reference/svelte.md) | Runes, Load 函数, Form Actions, Store 迁移, SSR/CSR 边界 |
+| **C** | [C Guide](reference/c.md) | 指针/缓冲区, 内存安全, UB, 安全编码, 可移植性, 测试 |
+| **C++** | [C++ Guide](reference/cpp.md) | RAII, 智能指针, C++20/23, constexpr, 测试 |
+| **Zig** | [Zig Guide](reference/zig.md) | Allocators, error unions, defer/errdefer, comptime, C interop |
+| **CSS/Less/Sass** | [CSS Guide](reference/css-less-sass.md) | 变量规范, !important, 性能优化, 响应式, 兼容性 |
+| **Qt** | [Qt Guide](reference/qt.md) | 对象模型, 信号/槽, Model/View, QML, Qt6 迁移, 测试 |
+
+## Cross-Cutting Guides
+
+Language-agnostic patterns applicable to all code reviews:
+
+| Topic | Reference File | Key Topics |
+|-------|----------------|------------|
+| **Architecture Review** | [Architecture Review Guide](reference/architecture-review-guide.md) | SOLID, anti-patterns, coupling/cohesion, dependency direction |
+| **Performance Review** | [Performance Review Guide](reference/performance-review-guide.md) | Web Vitals, N+1, algorithm complexity, memory leaks, caching |
+| **Security Review** | [Security Review Guide](reference/security-review-guide.md) | SQLi, XSS, CSRF, SSRF, IDOR, 命令注入, 跨语言示例 |
+| **Universal Quality** | [Universal Quality Guide](reference/code-quality-universal.md) | Reuse audit, parameter sprawl, leaky abstractions, nested conditionals, stringly-typed code, TOCTOU, no-op updates, redundant state |
+| **Common Bugs** | [Common Bugs Checklist](reference/common-bugs-checklist.md) | Language-specific bug patterns, common pitfalls |
+| **SQL Injection Prevention** | [SQL Injection Guide](reference/cross-cutting/sql-injection-prevention.md) | Parameterized queries, ORM safety, 6 languages, dynamic identifiers, detection |
+| **XSS Prevention** | [XSS Prevention Guide](reference/cross-cutting/xss-prevention.md) | Output encoding, CSP, 5 frameworks, input validation vs encoding, detection |
+| **N+1 Queries** | [N+1 Queries Guide](reference/cross-cutting/n-plus-one-queries.md) | Eager loading, batch fetching, DataLoader, 5 languages, detection |
+| **Error Handling** | [Error Handling Guide](reference/cross-cutting/error-handling-principles.md) | Fail fast, error hierarchy, 7 languages, anti-patterns, logging |
+| **Async & Concurrency** | [Concurrency Guide](reference/cross-cutting/async-concurrency-patterns.md) | Goroutines, async/await, actors, structured concurrency, 7 languages |
+| **Review Best Practices** | [Code Review Best Practices](reference/code-review-best-practices.md) | Communication, reviewer mindset, giving feedback, severity labels |
+
+## Additional Resources
+
+- [PR Review Template](assets/pr-review-template.md) - PR 审查评论模板
+- [Review Checklist](assets/review-checklist.md) - 快速参考清单