- Code\rebar_pipeline, review_pipeline, pier-program을 정션에서 실제 폴더로 전환 - Code\rhino_mcp 및 CLAUDE_rhino배경.md 추가, .mcp.json은 PYTHONPATH로 새 위치 사용 - pier-program 내부 .git 제거(이력은 backup\pier-program_20261028.bundle에 보관) - worktree 가이드 반영(CLAUDE.local.md, HANDOFF.md) - D:\Rhino-MCP 경로 참조를 새 위치로 치환 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
132 lines
3.0 KiB
Markdown
132 lines
3.0 KiB
Markdown
---
|
|
name: code-review
|
|
classification: workflow
|
|
classification-reason: Process automation persists regardless of model advancement
|
|
deprecation-risk: none
|
|
description: |
|
|
Code review — analyze quality, detect bugs, ensure best practices with actionable feedback.
|
|
Triggers: code review, quality check, bug detection, 코드 리뷰, 품질 검사.
|
|
argument-hint: "[file|directory|pr]"
|
|
user-invocable: true
|
|
agent: hmcmkit:code-analyzer
|
|
allowed-tools:
|
|
- Read
|
|
- Glob
|
|
- Grep
|
|
- LSP
|
|
- Task
|
|
- Bash
|
|
imports:
|
|
- ${PLUGIN_ROOT}/templates/pipeline/phase-8-review.template.md
|
|
next-skill: null
|
|
pdca-phase: check
|
|
task-template: "[Code-Review] {feature}"
|
|
hooks:
|
|
Stop:
|
|
- type: command
|
|
command: "node ${HMCMKIT_PLUGIN_ROOT}/scripts/code-review-stop.js"
|
|
timeout: 10000
|
|
---
|
|
|
|
# Code Review Skill
|
|
|
|
> Skill for code quality analysis and review
|
|
|
|
## Arguments
|
|
|
|
| Argument | Description | Example |
|
|
|----------|-------------|---------|
|
|
| `[file]` | Review specific file | `/code-review src/lib/auth.ts` |
|
|
| `[directory]` | Review entire directory | `/code-review src/features/` |
|
|
| `[pr]` | PR review (PR number) | `/code-review pr 123` |
|
|
|
|
## Review Categories
|
|
|
|
### 1. Code Quality
|
|
- Duplicate code detection
|
|
- Function/file complexity analysis
|
|
- Naming convention check
|
|
- Type safety verification
|
|
|
|
### 2. Bug Detection
|
|
- Potential bug pattern detection
|
|
- Null/undefined handling check
|
|
- Error handling inspection
|
|
- Boundary condition verification
|
|
|
|
### 3. Security
|
|
- XSS/CSRF vulnerability check
|
|
- SQL Injection pattern detection
|
|
- Sensitive information exposure check
|
|
- Authentication/authorization logic review
|
|
|
|
### 4. Performance
|
|
- N+1 query pattern detection
|
|
- Unnecessary re-render check
|
|
- Memory leak pattern detection
|
|
- Optimization opportunity identification
|
|
|
|
## Review Output Format
|
|
|
|
```
|
|
## Code Review Report
|
|
|
|
### Summary
|
|
- Files reviewed: N
|
|
- Issues found: N (Critical: N, Major: N, Minor: N)
|
|
- Score: N/100
|
|
|
|
### Critical Issues
|
|
1. [FILE:LINE] Issue description
|
|
Suggestion: ...
|
|
|
|
### Major Issues
|
|
...
|
|
|
|
### Minor Issues
|
|
...
|
|
|
|
### Recommendations
|
|
- ...
|
|
```
|
|
|
|
## Agent Integration
|
|
|
|
This Skill calls the `code-analyzer` Agent for in-depth code analysis.
|
|
|
|
| Agent | Role |
|
|
|-------|------|
|
|
| code-analyzer | Code quality, security, performance analysis |
|
|
|
|
## Usage Examples
|
|
|
|
```bash
|
|
# Review specific file
|
|
/code-review src/lib/auth.ts
|
|
|
|
# Review entire directory
|
|
/code-review src/features/user/
|
|
|
|
# PR review
|
|
/code-review pr 42
|
|
|
|
# Review current changes
|
|
/code-review staged
|
|
```
|
|
|
|
## Confidence-Based Filtering
|
|
|
|
code-analyzer Agent uses confidence-based filtering:
|
|
|
|
| Confidence | Display | Description |
|
|
|------------|---------|-------------|
|
|
| High (90%+) | Always shown | Definite issues |
|
|
| Medium (70-89%) | Selectively shown | Possible issues |
|
|
| Low (<70%) | Hidden | Uncertain suggestions |
|
|
|
|
## PDCA Integration
|
|
|
|
- **Phase**: Check (Quality verification)
|
|
- **Trigger**: Auto-suggested after implementation
|
|
- **Output**: docs/03-analysis/code-review-{date}.md
|