Individual skill
codexqa-code-reviewer
Graph-evidence AI code review (codexqa-code-reviewer) for ANY language repo using ONLY the CodexQA CLI symbol graph (call chains, classes, methods, configs, blast radius, test edges), then an order-16 Agent LLM judgment pass by the host agent's embedded model with deterministic dedupe/merge against heuristic findings. Use when the user asks for codexqa-code-reviewer (former name ai-code-reviewer), code review, PR review, 代码评审, impact analysis, 影响面, regression scope, test gaps, full-repo health review, 全仓评审, CodexQA evidence-pack, 证据包, graph-backed review, or LLM semantic CR on a pack. Requires codexqa CLI for every language; never embeds CodexQA source; never substitutes git-diff-only analysis. Not SAST+agent scan reports (that is codexqa-defect-analyzer), not structure/impact mapping alone (that is codexqa-code-analyzer), and not exception RCA (that is codexqa-rootcause-analyzer).
skills/codexqa-code-reviewer/SKILL.md
Source commit 783954281fc4898a9fac66a575363f419d4683e4
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 5, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 236
- Repository last updated
- Nov 6, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- software-testing Repository topic
- agent-skills Repository topic
- ai-testing Repository topic
- code-review Repository topic
- coding-agent Repository topic
- quality-assurance Repository topic
- static-analysis Repository topic
- ai-code-review Repository topic
- claude-code Repository topic
- cursor Repository topic
- testing Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
.gitignoreasset · 78 bytes.meta.jsonasset · 2,093 bytesHOW_IT_WORKS.mddoc · 3,261 bytesHOW_IT_WORKS.zh-CN.mddoc · 3,194 bytesKNOWN_LIMITATIONS.mddoc · 2,179 bytesKNOWN_LIMITATIONS.zh-CN.mddoc · 1,993 bytesLICENSEasset · 11,358 bytesREADME.mddoc · 4,125 bytesREADME.zh-CN.mddoc · 4,032 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesSKILL.mdcore · 29,714 bytesassets/report-chrome.cssasset · 12,117 bytesassets/report-chrome.jsruns · 5,585 bytesassets/report-extras.cssasset · 7,564 bytesassets/report.cssasset · 20,542 bytesevals/cases/basic-pipeline-smoke.yamlasset · 676 bytesevals/cases/edge-html-partial-conclusion.yamlasset · 642 bytesevals/cases/edge-invalid-pack-blocked.yamlasset · 618 bytesevals/cases/edge-legacy-pack-compat.yamlasset · 644 bytesevals/eval.yamlasset · 774 bytesevals/evals.jsonasset · 4,047 bytesevals/fixtures/conclusion/minimal.jsonasset · 615 bytesevals/fixtures/conclusion/partial-malformed.jsonasset · 174 bytesevals/fixtures/conclusion/with-complexity.jsonasset · 2,404 bytesevals/fixtures/conclusion/with-dependencies.jsonasset · 2,349 bytesevals/fixtures/conclusion/with-design-fit.jsonasset · 2,005 bytesevals/fixtures/conclusion/with-llm-judgment.jsonasset · 2,572 bytesevals/fixtures/conclusion/with-performance.jsonasset · 2,832 bytesevals/fixtures/conclusion/with-privacy.jsonasset · 2,541 bytesevals/fixtures/conclusion/with-resilience.jsonasset · 2,925 bytesevals/fixtures/conclusion/with-risk-tier.jsonasset · 3,250 bytesevals/fixtures/conclusion/with-rollout.jsonasset · 3,350 bytesevals/fixtures/invalid-pr-pack/01-stats.jsonasset · 14 bytesevals/fixtures/invalid-pr-pack/02-summary.jsonasset · 26 bytesevals/fixtures/invalid-pr-pack/03-change-groups.jsonasset · 25 bytesevals/fixtures/invalid-pr-pack/04-changed-files.jsonasset · 13 bytesevals/fixtures/invalid-pr-pack/05-changed-symbols.jsonasset · 49 bytesevals/fixtures/invalid-pr-pack/07-tags.jsonasset · 3 bytesevals/fixtures/invalid-pr-pack/08-hot-but-thin.jsonasset · 13 bytesevals/fixtures/invalid-pr-pack/09-language-profile.jsonasset · 102 bytesevals/fixtures/invalid-pr-pack/manifest.jsonasset · 183 bytesevals/fixtures/legacy-pr-pack/01-stats.jsonasset · 3 bytesevals/fixtures/legacy-pr-pack/02-summary.jsonasset · 27 bytesevals/fixtures/legacy-pr-pack/03-change-groups.jsonasset · 49 bytesevals/fixtures/legacy-pr-pack/04-changed-files.jsonasset · 13 bytesevals/fixtures/legacy-pr-pack/05-changed-symbols.jsonasset · 48 bytesevals/fixtures/legacy-pr-pack/07-tags.jsonasset · 3 bytesevals/fixtures/legacy-pr-pack/08-hot-but-thin.jsonasset · 13 bytesevals/fixtures/legacy-pr-pack/commands.logasset · 14 bytesevals/fixtures/legacy-pr-pack/manifest.jsonasset · 189 bytesevals/fixtures/minimal-pr-pack/01-stats.jsonasset · 38 bytesevals/fixtures/minimal-pr-pack/02-summary.jsonasset · 47 bytesevals/fixtures/minimal-pr-pack/03-change-groups.jsonasset · 82 bytesevals/fixtures/minimal-pr-pack/04-changed-files.jsonasset · 47 bytesevals/fixtures/minimal-pr-pack/05-changed-symbols.jsonasset · 97 bytesevals/fixtures/minimal-pr-pack/06-sensitive-hits.jsonasset · 74 bytesevals/fixtures/minimal-pr-pack/07-tag-keys.jsonasset · 51 bytesevals/fixtures/minimal-pr-pack/07-tags.jsonasset · 51 bytesevals/fixtures/minimal-pr-pack/08-hot-but-thin.jsonasset · 85 bytesevals/fixtures/minimal-pr-pack/09-language-profile.jsonasset · 341 bytesevals/fixtures/minimal-pr-pack/10-design-fit-signals.jsonasset · 1,026 bytesevals/fixtures/minimal-pr-pack/11-complexity-signals.jsonasset · 983 bytesevals/fixtures/minimal-pr-pack/12-dependency-signals.jsonasset · 1,027 bytesevals/fixtures/minimal-pr-pack/13-privacy-signals.jsonasset · 884 bytesevals/fixtures/minimal-pr-pack/14-resilience-signals.jsonasset · 967 bytesevals/fixtures/minimal-pr-pack/15-rollout-signals.jsonasset · 1,034 bytesevals/fixtures/minimal-pr-pack/16-observability-signals.jsonasset · 391 bytesevals/fixtures/minimal-pr-pack/17-contract-signals.jsonasset · 376 bytesevals/fixtures/minimal-pr-pack/18-maintainability-signals.jsonasset · 397 bytesevals/fixtures/minimal-pr-pack/20-risk-tier.jsonasset · 1,677 bytesevals/fixtures/minimal-pr-pack/21-performance-signals.jsonasset · 540 bytesevals/fixtures/minimal-pr-pack/commands.logasset · 56 bytesevals/fixtures/minimal-pr-pack/diffs/sym1.diff.jsonasset · 14 bytesevals/fixtures/minimal-pr-pack/impact/sym1/edges-in.jsonasset · 13 bytesevals/fixtures/minimal-pr-pack/impact/sym1/reach-in.jsonasset · 12 bytesevals/fixtures/minimal-pr-pack/impact/sym1/tests-reach.jsonasset · 12 bytesevals/fixtures/minimal-pr-pack/manifest.jsonasset · 496 bytesexamples/plan-coverage-audit.mddoc · 10,305 bytesexamples/pr-review-walkthrough.mddoc · 6,233 bytesprompts/business-logic-pass.mddoc · 4,558 bytesprompts/derive-suspect-pass.mddoc · 2,792 bytesprompts/full-repo-review.mddoc · 14,448 bytesprompts/llm-judgment-pass.mddoc · 16,309 bytesprompts/pr-diff-review.mddoc · 26,107 bytesprompts/residual-read-pass.mddoc · 6,338 bytesprompts/sast-suspect-pass.mddoc · 1,502 bytesprompts/semantic-candidate-pass.mddoc · 1,100 bytesreferences/business-rule-records.mddoc · 31,039 bytesreferences/codexqa-cli-contract.mddoc · 9,165 bytesreferences/dimension-registry.mddoc · 9,582 bytesreferences/dimensions/complexity.mddoc · 4,847 bytesreferences/dimensions/concurrency.mddoc · 3,799 bytesreferences/dimensions/contract.mddoc · 3,437 bytesreferences/dimensions/correctness-family-checks.mddoc · 4,054 bytesreferences/dimensions/correctness.mddoc · 10,688 bytesreferences/dimensions/dependencies.mddoc · 7,219 bytesreferences/dimensions/design-fit.mddoc · 5,636 bytesreferences/dimensions/llm-judgment.mddoc · 7,184 bytesreferences/dimensions/maintainability.mddoc · 1,525 bytesreferences/dimensions/observability.mddoc · 1,502 bytesreferences/dimensions/performance.mddoc · 5,907 bytesreferences/dimensions/privacy.mddoc · 4,095 bytesreferences/dimensions/resilience.mddoc · 8,815 bytesreferences/dimensions/risk-tier.mddoc · 4,145 bytesreferences/dimensions/rollout.mddoc · 7,757 bytesreferences/dimensions/security.mddoc · 9,174 bytesreferences/industry-bar.mddoc · 6,131 bytesreferences/language-profile.mddoc · 1,783 bytesreferences/mermaid-evidence.mddoc · 3,504 bytesreferences/review-dimensions.mddoc · 12,479 bytesreferences/rule-construction.mddoc · 18,824 bytesscripts/acr-pythonruns · 367 bytesscripts/audit-plan-coverage.shruns · 25,090 bytesscripts/collect-adhoc-evidence.shruns · 16,353 bytesscripts/collect-fullrepo-evidence.shruns · 24,151 bytesscripts/collect-pr-evidence.shruns · 28,555 bytesscripts/lib/_annotation_edges_body.pyruns · 9,681 bytesscripts/lib/_complexity_body.pyruns · 7,744 bytesscripts/lib/_dependencies_body.pyruns · 20,265 bytesscripts/lib/_det_rules.pyruns · 41,482 bytesscripts/lib/_identical_copies.pyruns · 3,637 bytesscripts/lib/_line_scan.pyruns · 7,111 bytesscripts/lib/_performance_body.pyruns · 15,392 bytesscripts/lib/_privacy_body.pyruns · 16,032 bytesscripts/lib/_resilience_body.pyruns · 21,407 bytesscripts/lib/_risk_tier_body.pyruns · 19,091 bytesscripts/lib/_rollout_body.pyruns · 19,299 bytesscripts/lib/_rule_router.pyruns · 4,510 bytesscripts/lib/_sast_body.pyruns · 49,552 bytesscripts/lib/_secondary_body.pyruns · 14,415 bytesscripts/lib/build-coverage-ledger.pyruns · 21,166 bytesscripts/lib/build-judgment-packet.pyruns · 167,851 bytesscripts/lib/build-review-digest.pyruns · 34,109 bytesscripts/lib/codexqa-preflight.shruns · 11,789 bytesscripts/lib/collect-trace.shruns · 1,876 bytesscripts/lib/collect-unit-calls.shruns · 4,146 bytesscripts/lib/derive-annotation-edges.shruns · 1,948 bytesscripts/lib/derive-complexity.shruns · 7,512 bytesscripts/lib/derive-contract.shruns · 2,877 bytesscripts/lib/derive-dependencies.shruns · 6,031 bytesscripts/lib/derive-design-fit.shruns · 26,037 bytesscripts/lib/derive-maintainability.shruns · 2,938 bytesscripts/lib/derive-observability.shruns · 2,929 bytesscripts/lib/derive-performance.shruns · 6,325 bytesscripts/lib/derive-privacy.shruns · 5,638 bytesscripts/lib/derive-resilience.shruns · 8,502 bytesscripts/lib/derive-risk-tier.shruns · 5,252 bytesscripts/lib/derive-rollout.shruns · 6,938 bytesscripts/lib/derive-sast.shruns · 3,373 bytesscripts/lib/derive_triage.pyruns · 11,060 bytesscripts/lib/index-diff-base.shruns · 3,675 bytesscripts/lib/install-sast-tools.shruns · 7,844 bytesscripts/lib/merge-llm-findings.pyruns · 14,795 bytesscripts/lib/python_resolve.shruns · 809 bytesscripts/lib/sast-tool-path.shruns · 15,042 bytesscripts/lib/seal-conclusion.pyruns · 102,676 bytesscripts/lib/validate-conclusion.pyruns · 35,295 bytesscripts/render-review-html.shruns · 52,170 bytesscripts/resolve-pr-checkout.shruns · 9,349 bytesscripts/validate-evidence.shruns · 29,216 bytesscripts/validate-skill.shruns · 208,648 bytestemplates/evidence-manifest.jsonasset · 4,394 bytestemplates/judgment.jsonasset · 824 bytestemplates/review-conclusion.jsonasset · 12,697 bytestemplates/review-report.mddoc · 9,069 bytes
Read excerpt
# AI Code Reviewer
Graph-first code review via **CodexQA CLI** only. Collect a JSON evidence pack,
then reason from those artifacts. Applies to every language / polyglot monorepo.
CLI: `{baseDir}/scripts/collect-pr-evidence.sh` (and full-repo / adhoc variants).
Runtime pack: `<repo>/.codexqa-review/<run-id>/` → `review-conclusion.json` +
`REVIEW-REPORT.html`.
**Install:** Prefer `npx skills add openqa-cn/codexqa --skill codexqa-code-reviewer`.
Do not copy into a skills library manually until the user names the install target.
`README.md` / `README.zh-CN.md` / `HOW_IT_WORKS.md` / `KNOWN_LIMITATIONS.md`
(and their `.zh-CN` twins) are human-facing. Do not load them at runtime.