Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Review Archive

ASecurity

Use when 人工檢查已結束需歸檔 review 結果,或使用者要求歸檔 review。NOT for 歸檔截圖資料夾(走 screenshots-archive)。

45 stars
0 votes
0 copies
0 views
Added 9/22/2026
developmentbashnoderails

Works with

cli

Security Analysis

A100/100

Scanned 9/22/2026

Install to Claude Code

$npx -y skills add Charles5277/nuxt-supabase-starter --skill review-archive --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Review Archive?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Review Archive
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/charles5277-review-archive-nuxt-supabase-starter/badge)](https://www.skillsdirectory.com/skills/charles5277-review-archive-nuxt-supabase-starter)

More formats (shields.io, HTML) on the badges page.

Download with Pro
Files
SKILL.md
---
name: review-archive
description: 'Use when 人工檢查已結束需歸檔 review 結果,或使用者要求歸檔 review。NOT for 歸檔截圖資料夾(走 screenshots-archive)。'
metadata:
  clade:
    permission_tier: draft
---

# 人工檢查歸檔(Review Archive)

將已完成(`[x]`)的人工檢查項目從 tasks artifact 遷移到歸檔檔案。

## 觸發時機

- 使用者說「歸檔檢查」「archive review」「#1~#3 做完了」
- Spectra change 歸檔前,整理人工檢查結果

## 輸入

- 可指定範圍:`/review-archive #1~#5` 或 `/review-archive all`
- 未指定範圍時,遷移所有 `[x]` 項目

## 流程

### Step 1: 定位 tasks artifact

```bash
node <flow-cli> status --json
```

`<flow-cli>` 在 clade 是 `vendor/scripts/flow/flow.ts`,consumer 是 `.clade/vendor/scripts/flow/flow.ts`。由它的 `origin` 欄位取得該 work item 的 carrier 路徑。

讀該 carrier(`tasks/<date>-<slug>.md` 或 `specs/plans/NNN-<slug>/tasks.md`),找 `## 人工檢查` 區塊。沒有對應 flow 卡時,直接讀使用者指名的獨立 review 文件。

### Step 2: 識別要歸檔的項目

- 如果使用者指定範圍(如 `#1~#3`)→ 取該範圍的項目
- 如果使用者說 `all` → 取所有項目
- 未指定 → 只取 `[x]` 已完成的項目
- 如果指定的項目尚未勾選 `[x]`,**向使用者提問並等答案**(見下方 § 向使用者提問)確認是否要標記完成並歸檔

### Step 3: 寫入歸檔

讀取 `docs/manual-review-archive.md`,在 `---` 分隔線後插入新區塊(最新的在最上面):

```markdown
## YYYY-MM-DD — `<change-name>`

> Specs: `<spec-1>`, `<spec-2>`

- [x] #1 實際操作功能,確認 happy path 正常運作
- [x] #2 測試 edge case — ⚠️ 空資料時缺少提示(已修)
- [x] #3 確認手機/平板響應式顯示正常
```

- 保留每個項目的 `#N` 編號
- 如果項目有附註(如截圖報告中的觀察),一併帶入
- 截圖檔案路徑不寫入歸檔(截圖在 screenshots/local/ 可能被清除)

### Step 4: 更新 tasks artifact

已歸檔的項目在 tasks artifact 中保持 `[x]`,不刪除。
如果所有項目都歸檔了,在區塊末尾加一行:

```markdown
> ✅ 全部歸檔於 YYYY-MM-DD → docs/manual-review-archive.md
```

### Step 5: 回報

```
已歸檔 N 項人工檢查到 docs/manual-review-archive.md:
- #1 實際操作功能 ✅
- #2 edge case ✅
- #3 響應式 ✅
```

回報後**自動**進入 Step 6 sweep 截圖;sweep 完成後合併回報尾巴附 sweep 結果(由 `screenshots-archive` skill 自己印出,不重複格式化)。

### Step 6: 自動 sweep 截圖

歸檔完成後**自動**叫用 `screenshots-archive change <change-name>` skill,把對應截圖資料夾搬到 `screenshots/<env>/_archive/YYYY-MM/`。

**不再 prompt 是否要做** — review-archive 完成 = 該 change 已寫入 `docs/manual-review-archive.md` = sweep 對齊條件 100% 滿足,沒有人為再決定一次的空間。

**對齊失敗處理**(極少見:topic 名與 change 名不一致):由 `screenshots-archive` 內部列頂層所有候選 topic 讓 user 手選 + 「跳過」選項,本 skill 不重複 prompt。

## 向使用者提問

本 skill 每一次「向使用者提問並等答案」都 **MUST** 滿足三條,與用什麼機制問無關:

- **MUST** 把選項列完整,含明確的「跳過」/「不做」那一項——使用者要能選擇不動作
- **MUST** 等到明確答案才執行;**NEVER** 因為沒收到答案就用預設值往下做
- **NEVER** 靜默跳過該問的那一題——沒問而直接不動作,與問了得到「跳過」在結果上相同、在使用者知情上完全不同

**這三條是義務,問法是各 runtime 自己的事。** 有原生問答工具的 runtime 用它;沒有的用該 runtime 既有的使用者互動通道。**NEVER** 因為手上沒有某個特定工具就把這三條讀成不適用。

**例外旗標**:user 在觸發 review-archive 時若明確說「不要 sweep 截圖」/「`--no-sweep`」,跳過此步並在 Step 5 回報結尾附註「screenshot sweep 已跳過(user 指示)」。

**目的**:讓 `screenshots/<env>/` 頂層只剩 current pending review,user 一眼能找到「現在要做人工檢查的是哪個」。

## Guardrails

- **NEVER** 刪除 tasks artifact 中的人工檢查項目 — 只標記 `[x]` 和加歸檔註記
- **NEVER** 歸檔未確認的項目 — 除非使用者明確同意
- **NEVER** 把 Step 6 退回成「prompt 提示 user 要不要 sweep」— 已固化為自動執行;想跳過走明確的 `--no-sweep` 例外旗標
- **ALWAYS** 保留 `#N` 編號和來源追溯資訊
- **ALWAYS** 在歸檔前確認 `docs/manual-review-archive.md` 存在
- **ALWAYS** 在 Step 5 回報後自動觸發 Step 6 截圖 sweep,除非 user 明確 `--no-sweep`

Attribution

YuDefineYuDefine
View sourceMore from Charles5277 →
SSkills DirectorySkills Directory

Know which skills are safe — weekly.

Best new skills + every skill we flagged as malicious. From the team that scanned 103,619.

Join free

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Know which skills are safe — weekly.

Best new skills + every skill we flagged as malicious. From the team that scanned 103,619.

Join free

Related Skills

Browser Extension Developer

Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.

284072 votes

Seo Optimizer

SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.

2192 votes

Google Official Seo Guide

Official Google SEO guide covering search optimization, best practices, Search Console, crawling, indexing, and improving website search visibility based on official Google documentation

1862 votes

Tanstack Start

Build a full-stack TanStack Start app on Cloudflare Workers from scratch — SSR, file-based routing, server functions, D1+Drizzle, better-auth, Tailwind v4+shadcn/ui. Use whenever the user mentions TanStack Start, asks to scaffold a full-stack Cloudflare app with SSR, wants an SSR dashboard, or asks for a React 19 + Cloudflare Workers app with file-based routing and server functions — even if they don't name TanStack Start specifically. No template repo — Claude generates every file fresh per ...

9881 votes

Pentest

PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.

5491 votes
View all in development →