Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsBlogPro
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges
  • Chrome Extension
  • Skill Manager

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Caveman Review

ASecurity

超高压缩的 code review 留言。砍掉 PR 回馈的噪音,保留可运行的信号。 每则留言只有一行:位置、问题、修法。当用户说 "review this PR"、"code review"、 "review the diff"、"/review",或调用 /caveman-review 时使用。 审查 pull request 时会自动触发。

2 stars
0 votes
0 copies
0 views
Added 9/23/2026
ai-agentsgorefactoringapidatabase

Works with

api

Security Analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned 9/23/2026

$npx -y skills add Hayatelin/caveman-zh-CN --skill caveman-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Caveman Review?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Caveman Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/hayatelin-caveman-review/badge)](https://www.skillsdirectory.com/skills/hayatelin-caveman-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
Files
SKILL.md
---
name: caveman-review
description: >
  超高压缩的 code review 留言。砍掉 PR 回馈的噪音,保留可运行的信号。
  每则留言只有一行:位置、问题、修法。当用户说 "review this PR"、"code review"、
  "review the diff"、"/review",或调用 /caveman-review 时使用。
  审查 pull request 时会自动触发。
---

Code review 留言要精简、可运行。一个发现一行。位置、问题、修法。不要清嗓子。

## 规则

**格式:**`L<line>: <problem>. <fix>.` — 审查多文件 diff 时则用 `<file>:L<line>: ...`。

**严重度前缀(选用,混杂时才加):**
- `🔴 bug:` — 行为坏掉,会出事
- `🟡 risk:` — 能动但脆弱(race、缺 null 检查、吞掉的错误)
- `🔵 nit:` — 风格、命名、微优化。作者可以无视
- `❓ q:` — 真的在问问题,不是建议

**删掉:**
- "I noticed that..."、"It seems like..."、"You might want to consider..."
- "This is just a suggestion but..." — 改用 `nit:`
- "Great work!"、"Looks good overall but..." — 要讲就在最上面讲一次,不要每则留言都讲
- 覆述那一行在做什么——审查者自己会读 diff
- 模糊措辞("perhaps"、"maybe"、"I think")——不确定就用 `q:`

**保留:**
- 精确的行号
- 精确的 symbol/函数/变量名称,用反引号包住
- 具体修法,不要“consider refactoring this”
- 若从问题叙述看不出理由,就补上*为什么*

## 范例

❌ "I noticed that on line 42 you're not checking if the user object is null before accessing the email property. This could potentially cause a crash if the user is not found in the database. You might want to add a null check here."

✅ `L42: 🔴 bug: user can be null after .find(). Add guard before .email.`

❌ "It looks like this function is doing a lot of things and might benefit from being broken up into smaller functions for readability."

✅ `L88-140: 🔵 nit: 50-line fn does 4 things. Extract validate/normalize/persist.`

❌ "Have you considered what happens if the API returns a 429? I think we should probably handle that case."

✅ `L23: 🟡 risk: no retry on 429. Wrap in withBackoff(3).`

## 自动切回清楚模式

以下情况放下精简模式:安全性发现(CVE 等级的 bug 需要完整说明+参考链接)、架构层面的歧见(需要理由,不能只丢一行)、以及作者是新人、需要知道“为什么”的带人情境。这些情况先写一段正常的文本,其余部分再恢复精简。

## 界线

只做审查——不代写修正的代码、不按 approve/request-changes、不跑 linter。输出的留言要能直接贴进 PR。说 "stop caveman-review" 或 "normal mode":恢复详尽的审查风格。

Attribution

HayatelinHayatelin
View sourceSee grades on GitHubMore from Hayatelin →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman

Terse caveman voice: answer first, fluff gone, every technical fact kept. Use for /caveman, "caveman mode", "talk like caveman", "be brief", "less tokens". Stays on until "stop caveman" or "normal mode".

1100021 votes

Hyperplan

Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...

698461 votes

Writing Skills

Create and manage Claude Code skills in HASH repository following Anthropic best practices. Use when creating new skills, modifying skill-rules.json, understanding trigger patterns, working with hooks, debugging skill activation, or implementing progressive disclosure. Covers skill structure, YAML frontmatter, trigger types (keywords, intent patterns), UserPromptSubmit hook, and the 500-line rule. Includes validation and debugging with SKILL_DEBUG. Examples include rust-error-stack, cargo-dep...

3931 votes

Mcp Code Execution

Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.

3421 votes

catchup

Recovers the conversation and failed tool calls of a previous Codex, Amp, Claude Code, Antigravity, Cline, Copilot CLI, Cursor, DeepSeek Harness, Grok Build, Kimi, OpenCode, Pi Agent, or ZCode session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", asks to recover/summarize a previous session before continuing, or asks to diagnose or report a catchup failure. Do NOT use for the current conversation, git history, or any non-agent log.

741 votes
View all in ai-agents →