跳转到正文
报告库
用途分类 / 其他用途

Review Loop Skill 安全审计

作者说它能做什么(原文)

>-

第三方安全检查结论

发现安全风险

已检查文件
1
发现的风险
4
会不会运行危险命令?检查是否下载程序后直接运行、让他人远程控制电脑,或藏起要运行的命令。未发现风险
会不会泄露文件和密钥?检查是否发送含密码或密钥的文件,以及代码里是否直接写了密钥。发现 1 项风险
中风险

工作文件或内容会被发送给额外的审查子代理

原文依据:3 处
发现了什么

该 Skill 明确要求把文件、差异或粘贴的文件内容交给独立子代理,但没有要求先排除密钥、个人信息、客户数据或其他不应进入额外模型上下文的内容。

为什么需要注意

若审查范围含敏感内容,它会进入额外的代理上下文;具体保留和访问范围取决于所用平台及模型配置。

活动指令要求把工作产物交给独立子代理,并允许粘贴文件内容或提供路径。所示传递步骤没有要求先排除密钥、个人信息或客户数据;若待审文件含敏感内容,它们会进入额外代理的上下文。用户可限制只发送必要片段、先脱敏,并确认子代理及其数据保留边界。

SKILL.md:138来自说明文档打开原文件
Use the Agent tool to dispatch a reviewer. The reviewer must:- Be a **separate subagent** (fresh context, no anchoring to your reasoning)- Receive only the **work product** (files, diffs) — not your thought process- Score 1-10 with **specific, actionable feedback**- Use a balanced/standard model by default (or an advanced reasoning model for complex/specialized tasks)
查看另外 2 个位置
SKILL.md:186来自说明文档打开原文件
## Files to review{paste file contents or list file paths with relevant excerpts}```
SKILL.md:136来自说明文档打开原文件
### Step 2: Spawn Reviewer SubagentUse the Agent tool to dispatch a reviewer. The reviewer must:- Be a **separate subagent** (fresh context, no anchoring to your reasoning)- Receive only the **work product** (files, diffs) — not your thought process- Score 1-10 with **specific, actionable feedback**- Use a balanced/standard model by default (or an advanced reasoning model for complex/specialized tasks)
会不会删除文件或一直在后台运行?检查是否大范围删除文件、改写磁盘,或设置自动启动。发现 1 项风险
中风险

“仅审查”模式会修改用户的现有文件

原文依据:4 处
发现了什么

Mode B 明称“review only”,但流程要求根据子代理反馈修复代码;通用修订步骤也命令处理重要问题。用户要求审查时,未必授权自动改写文件。

为什么需要注意

不准确或缺少项目背景的审查意见可能被直接写入代码,造成行为变化、回归或覆盖用户有意保留的实现。

“Review Existing”虽标为“review only”,但活动流程明确在读取和审查后直接修复现有模块;通用修订步骤也要求处理关键和重要问题。因此,仅请求审查可能被解释为授权修改文件,影响用户未打算更改的代码。用户可要求作者把该模式改为只报告问题,并将任何修改设为单独确认的操作。

SKILL.md:259来自说明文档打开原文件
### Mode B: "Review Existing" (review only)User already did work or you already did work. Just run the review loop on what exists.
查看另外 3 个位置
SKILL.md:267来自说明文档打开原文件
You:1. Read the auth module2. Spawn reviewer → Score 5, feedback: SQL injection, no rate limiting3. Fix: parameterize queries, add rate limiter4. Spawn reviewer → Score 8, approved5. Done
SKILL.md:211来自说明文档打开原文件
### Step 5: ReviseAddress the reviewer's feedback. Fix Critical and Important issues. Minor issues are optional. Then go back to Step 2.**Important:** Each revision should be targeted. Don't rewrite everything — fix what the reviewer flagged. Maintain a mental list of ALL prior feedback to avoid regressions.
SKILL.md:266来自说明文档打开原文件
You:1. Read the auth module2. Spawn reviewer → Score 5, feedback: SQL injection, no rate limiting3. Fix: parameterize queries, add rate limiter4. Spawn reviewer → Score 8, approved5. Done```
会不会绕过安全保护?检查是否跳过网站安全验证、开放过多文件权限,或取消操作前的确认。发现 1 项风险
中风险

达到最大轮数时会绕过质量门槛

原文依据:4 处
发现了什么

简介声称持续修订直至达到质量门槛,但实际停止规则规定达到最大轮数后停止并进入“final polish”,即使评分仍低于门槛。

为什么需要注意

未达到约定质量要求的代码、基础设施或安全敏感输出仍可能被当作完成结果交付,影响用户的发布或审批决定。

描述和快速入门称循环会持续到质量门槛达成,但实际规则允许评分仍低于门槛时因达到最大轮数而停止并进入最终润色。这不会证明结果有缺陷,但可能让用户误以为交付物已通过门槛。用户可要求最终报告明确标为“未达门槛”,并区分正常通过与因轮数上限终止。

SKILL.md:4来自说明文档打开原文件
description: >-  Iterative worker-reviewer cycle that spawns a critic subagent to score work  1-10 and provide actionable feedback, then revises until a quality gate is  met. Use when implementing features, writing specs, reviewing existing code,  or completing any task where quality matters more than speed. Trigger phrases:
查看另外 3 个位置
SKILL.md:203来自说明文档打开原文件
### Step 4: Check Stop ConditionsIn this order:1. If loops completed < min_loops → **continue** (always)2. If score >= quality_gate → **stop, go to final polish**3. If loops completed >= max_loops → **stop, go to final polish**4. Otherwise → **revise and loop**
SKILL.md:219来自说明文档打开原文件
Once the loop exits (quality gate met or max loops hit):- Address any remaining minor issues if trivial- Verify the final output is coherent (no artifacts from revision cycles)- Report final score and loop count to user
SKILL.md:27来自说明文档打开原文件
2. The agent does the work (or reads existing work)3. A separate critic subagent scores it 1-10 with specific feedback4. The agent revises and repeats until score >= 8 (default quality gate)5. A loop summary is delivered with the final output
会不会误导 AI 或隐藏内容?检查工作说明是否要求 AI 忽略你的指令、干扰检查结果,或夹带看不见的文字。未发现风险
会不会偷偷改推广链接或收款方?检查是否强制替换推广链接或收款对象,同时要求隐瞒更改。发现 1 项风险
低风险

宽泛触发词可启动多次、甚至更高等级的模型调用

原文依据:6 处
发现了什么

“polish this”等常见请求会触发该 Skill;默认至少两次审查调用,并会为困难任务选择高级推理审查者。文档承认每轮都是一次子代理调用。

为什么需要注意

用户可能在只想要一次轻量修改时产生额外模型费用和等待时间;具体费用取决于平台计费。

“polish this”是明确触发词;默认最少两轮,而每轮等于一次审查子代理调用,复杂任务还会选择高级推理审查者。因此一个宽泛的润色请求可能产生多次、成本更高的模型调用。文档披露了时间和调用成本,所以并非隐藏行为,但用户仍可在调用前限定轮数、模型等级和预算。

SKILL.md:35来自说明文档打开原文件
- User says "use review-loop", "polish this", "iterate on this", "/review-loop"- Complex implementations where quality matters more than speed- Design docs, specs, or technical writing- Code that needs to be robust (security, data pipelines, financial logic)- When user wants adversarial critique baked into the process
查看另外 5 个位置
SKILL.md:55来自说明文档打开原文件
|---------|---------|| Min loops | 2 || Max loops | 4 || Quality gate | 8/10 || Worker model | (your current model) || Reviewer model | (your current model or fast/balanced alternative) |
SKILL.md:83来自说明文档打开原文件
**Default behavior:** Since you (the main agent) ARE the worker, spawn a reviewer subagent that matches or exceeds your current capability based on the task:- Most tasks → Standard/Balanced reviewer- Specialized/hard tasks → Advanced/Reasoning reviewer- Quick checks → Fast/Lightweight reviewer (only if you are also acting as a lightweight worker)
SKILL.md:321来自说明文档打开原文件
## Cost and Speed- Each loop = 1 reviewer subagent call- Budget roughly 1–2x the time of a single implementation pass for a full 3-loop cycle- This is cheap compared to shipping buggy code, vague specs, or triggering a late-stage review cycle- Use your default/standard model for most reviews; only upgrade to advanced reasoning models for specialized domains (security audits, distributed systems, quant finance)
SKILL.md:33来自说明文档打开原文件
## When to Use- User says "use review-loop", "polish this", "iterate on this", "/review-loop"- Complex implementations where quality matters more than speed- Design docs, specs, or technical writing- Code that needs to be robust (security, data pipelines, financial logic)- When user wants adversarial critique baked into the process
SKILL.md:51来自说明文档打开原文件
## Defaults| Setting | Default ||---------|---------|| Min loops | 2 || Max loops | 4 || Quality gate | 8/10 || Worker model | (your current model) || Reviewer model | (your current model or fast/balanced alternative) |

Skill 逻辑拆解

8 个说明模块

该 Skill 在主代理完成或读取工作后,要求调用独立审查子代理评分,再按反馈修改,默认至少执行两轮、最多四轮。

查看原文
SKILL.md:26来自说明文档打开原文件
1. Say: `"implement X, use review-loop"` or `"run review-loop on the file I just wrote"`2. The agent does the work (or reads existing work)3. A separate critic subagent scores it 1-10 with specific feedback4. The agent revises and repeats until score >= 8 (default quality gate)5. A loop summary is delivered with the final output
SKILL.md:55来自说明文档打开原文件
|---------|---------|| Min loops | 2 || Max loops | 4 || Quality gate | 8/10 || Worker model | (your current model) |

审查子代理被要求只接收待审工作,包括文件、差异或粘贴的文件内容,而不接收主代理的推理过程。

查看原文
SKILL.md:138来自说明文档打开原文件
Use the Agent tool to dispatch a reviewer. The reviewer must:- Be a **separate subagent** (fresh context, no anchoring to your reasoning)- Receive only the **work product** (files, diffs) — not your thought process- Score 1-10 with **specific, actionable feedback**- Use a balanced/standard model by default (or an advanced reasoning model for complex/specialized tasks)
SKILL.md:186来自说明文档打开原文件
## Files to review{paste file contents or list file paths with relevant excerpts}```

它将“Review Existing”称为仅审查模式,但所示流程会直接修复现有模块并继续复审。

查看原文
SKILL.md:259来自说明文档打开原文件
### Mode B: "Review Existing" (review only)User already did work or you already did work. Just run the review loop on what exists.
SKILL.md:267来自说明文档打开原文件
You:1. Read the auth module2. Spawn reviewer → Score 5, feedback: SQL injection, no rate limiting3. Fix: parameterize queries, add rate limiter4. Spawn reviewer → Score 8, approved5. Done```
从这里开始 · 工作说明SKILL.md
review-loop
连线表示工作说明包含的模块,不是实际运行顺序。点击模块可查看原文。 另有 7 个章节,可在原文件中查看。
文件与检查记录1 个文件

检查范围与遗漏

逐文件查看涉及的内容

下方列出本次涉及的原文范围;纳入检查不代表已查清所有问题。

  • SKILL.md已纳入全文

这份报告只针对上方版本。我们看了拿到的代码和说明文件,没有实际运行 Skill,也没有检查它另外安装的软件包。因此,这不是“保证安全”的承诺;换了版本或使用环境,结果也可能不同。

  • SKILL.md工作说明
读取了多少行
333
文件校验值(用于核对版本)
da970b818373fd9fe3cb0b9f3843628d25dbdd6b71c4721f952b60f806212f57