Code Quality Auditor Skill

Core Responsibilities (Responsibilities)

1. Automated Quality Verification (Automation)

• Static Check: Execute

  pnpm lint

  to check code style.
• Type Closure: Execute

  pnpm typecheck

  to ensure no

  any

  and type breaks.
• Style Validation: Execute

  pnpm lint:css

  to ensure compliance with BEM specifications.

2. Security Auditing (Security) 🛡️

• Vulnerability Scanning: Check for risks such as SQL injection, XSS, CSRF, and unauthorized access.
• Secret Check: Strictly prohibit hard-coded API Keys, Tokens, or secrets in code.
• Authentication Logic: Check whether permission verification functions like

  isAdmin()

  are used correctly.

3. Standard Alignment (Standards)

• Naming Conventions: Check naming conventions such as kebab-case for files, snake_case for internationalization, etc.
• i18n: Check whether all UI texts are wrapped with

  $t()

  .
• Code Smells: Identify overly long functions, dead code, and duplicate logic.

Instructions

1. Blocking Delivery: If

   lint

   or

   typecheck

   fails, it must be marked as "Blocked", and submission is prohibited.
2. Graded Feedback: Provide

   Blocker

   (showstopper issues),

   Warning

   (style issues),

   Suggest

   (refactoring suggestions).
3. Zero Tolerance for any: In TypeScript development, the use of

   any

   without valid reasons is strictly prohibited.

Usage Example

pnpm lint && pnpm typecheck