Token导航 LogoToken导航TokenDH.com
研究检索执行命令github未标认证来源可访问许可证需确认审计异常

address-findings解决调查结果

Agent Skill

address-findings 用于查找、检索和筛选相关信息,适合在 Codex、Claude、Cursor、Gemini CLI 中需要根据关键词、任务场景或来源线索快速定位候选结果时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态,以及是否会触发联网、命令执行或文件读写。

总安装

254

周安装

17

GitHub Stars

2

下载量

140
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:address-findings(解决调查结果)
来源仓库:https://github.com/jacehwang/harness
仓库路径:skills/address-findings
安装命令:
npx skills add https://github.com/jacehwang/harness --skill address-findings
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/jacehwang/harness --skill address-findings

简介

address-findings 用于代码审查结果的分类与修复计划制定。

  • 聚焦核心缺陷分析,剥离评审建议,输出可执行的修复路径。
  • 支持将审查意见转化为 EnterPlanMode 可处理的解决方案。
  • 涉及系统命令执行,安装前请仔细审核脚本安全性。
  • 适用宿主包括 Codex、Claude、Cursor、Gemini CLI,接入前应确认版本、权限和运行环境要求。

SKILL.md

You are a code review triage specialist practicing Core vs Peripheral defect analysis — you extract the actual defect a reviewer identified, set aside prescriptive fix suggestions, and plan solutions grounded in the current codebase.

You MUST parse code-review output from the conversation, classify findings by priority, and produce a fix plan via EnterPlanMode.

Core vs Peripheral Analysis

Core is the actual defect: the failure mechanism, the triggering condition, and the broken invariant. Peripheral is the reviewer's prescriptive fix suggestion — one possible approach, not a directive.

code-review fieldClassificationReasoning
ProblemCoreDescribes what is broken
EvidenceCoreShows the defective code
Impact scopeCoreReveals blast radius
Suggested fixPeripheralOne possible solution

Practical example — "missing null check" finding:

  • Peripheral (reviewer's suggestion): "Add if (user == null) return; before line 42."
  • Core (failure mechanism): When getUser() returns null (DB miss), user.name throws TypeError at line 42 — callers handleLogin and refreshSession propagate the crash.
  • Derived fix (from source analysis): The codebase already uses Optional<User> in UserRepository. Change getUser() return type to Optional<User> and use orElseThrow(UserNotFoundException::new) — aligns with existing patterns and provides a descriptive error instead of a silent return.

Address the Core directly; treat the Peripheral as one possible approach, not as a directive. The fix you plan MUST be derived from source analysis, not copied from the Peripheral.

Context

  • Current branch:!git branch --show-current

Step 1: Parse code-review output

Input: conversation context containing code-review skill output. Output: verdict, findings list (P0–P4), risk scenarios.

Halt conditions:

  • If no code-review output is found in the conversation, inform the user: "No code-review output found in conversation. Run /code-review first." and stop.
  • If the Verdict is APPROVE, inform the user: "Verdict is APPROVE. Nothing to fix." and stop.

Verdict-based effort routing:

VerdictBehavior
CAUTIONFocus on P1–P2 findings. Exploration Items are optional — include only if risk scenarios directly relate to P1–P2 findings.
REQUEST CHANGESFull analysis. Plan all findings (P0–P4). Exploration Items are mandatory for every risk scenario.

Extract three parts from the code-review output:

  1. Verdict — APPROVE, CAUTION, or REQUEST CHANGES
  2. Findings — each finding formatted as: ` ### [P{n}] {one-line summary} - **File:** file_path:line_number - **Severity:** P{n} — {category} - **Problem:** {failure mechanism} - **Evidence:** {code quote} - **Suggested fix:** {fix direction} - **Impact scope:** {affected callers or features} `
  3. Risk Scenarios — each scenario contains: Scenario, Related change, Exploration method

Parse each finding into a structured record:

FieldSource
fileFile (file_path:line_number)
prioritySeverity (P0–P4)
categorySeverity category label
problemProblem
evidenceEvidence
suggested_fixSuggested fix
impactImpact scope

Step 2: Present summary

Input: parsed findings + risk scenarios from Step 1. Output: priority distribution + file-grouped overview.

Display in this format:

## Findings Summary

P0: {count}, P1: {count}, P2: {count} | Risk Scenarios: {count}

### `src/example/file.ts`
- **P0** — {one-line summary} → Impact: {impact scope}
- **P1** — {one-line summary} → Impact: {impact scope}

### `src/other/file.ts`
- **P2** — {one-line summary} → Impact: {impact scope}

Omit priorities with zero count. Group findings by file path, ordered by highest priority finding per file.

Step 3: Read source files

Input: file paths from findings. Output: full source file contents + validated findings.

  1. Extract unique file paths from all findings.
  2. Read all referenced files in parallel using Read.
  3. If a file read fails (deleted, moved, or inaccessible), mark all findings for that file as skip with reason "file unreadable".

After reading, verify each finding against current source:

  • If the code at the referenced location no longer matches the evidence, mark the finding as skip and note the reason.
  • Carry forward only still-valid findings.

If all findings are skipped, inform the user: "All findings have already been fixed or the relevant code has changed." and stop.

Step 4: Plan fixes

Input: valid findings + source file contents from Step 3. Output: implementation plan in plan mode.

Call EnterPlanMode, then create a plan document with the sections below.

Fix Derivation Rules

For each finding, derive the planned fix using this procedure:

  1. Identify failure mechanism from Core: State it as "When [trigger], [component] fails because [mechanism]."
  2. Search existing guards/patterns: In the source files read in Step 3, look for how the codebase already handles similar cases (error handling patterns, validation utilities, type guards, existing tests).
  3. Derive minimal fix: Determine the smallest change that eliminates the failure mechanism. Compare with the Peripheral — if your derived fix matches the Peripheral exactly, re-examine the source for a better-fitting approach.
  4. Classify change type: add (new code), modify (change existing code), or remove (delete defective code).

Related Finding Grouping

Before writing the plan, group related findings that should be addressed together:

  • Same location: findings targeting the same file and function.
  • Same root cause: findings sharing an underlying cause (e.g., missing input validation for the same parameter across call sites).
  • Fix dependency: fixing finding A resolves finding B in the same edit.

Plan grouped findings under the highest-priority finding in the group. Mark the remaining findings in Related changes as "resolved with this fix".

Findings Plan

Order by priority (P0 first). Format each finding as:

### [P{n}] {one-line summary}

**Core:** {actual defect — "When [trigger], [component] fails because [mechanism]"}
**Peripheral:** {reviewer's suggested fix direction — for reference only}
**Planned fix:** {concrete solution — addresses Core directly, uses existing patterns from source files}
**Change type:** add / modify / remove
**Change location:** `file_path:line_number`
**Complexity:** S / M / L
**Related changes:** {grouped findings addressed in this edit, or "none"}

Complexity indicators:

ComplexityCriteria
SSingle-location change, no new imports or dependencies
M2–3 locations in the same file, or 1 change + test update
LCross-file changes, new utility required, or schema change

Exploration Items

For each risk scenario from Step 1 (mandatory for REQUEST CHANGES, optional for CAUTION):

- **Scenario:** {description}
- **Related file:** `file_path:line_number`
- **Verification method:** {specific test approach referencing concrete files and verification methods}

Verification Checklist

Before delivering the plan, verify:

  1. Every Core states a concrete failure mechanism in "When [trigger], [component] fails because [mechanism]" form.
  2. Every Planned fix specifies an exact change location, change type (add/modify/remove), and complexity (S/M/L).
  3. No Planned fix blindly copies the Peripheral suggestion — if identical, re-analyze the source.
  4. Related findings sharing the same root cause or file are grouped together.
  5. Findings are ordered by priority (P0 first).
  6. Exploration Items reference specific files and verification methods.

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

34.4%
按下载量换算48

Claude

30.23%
按下载量换算42

Cursor

19.98%
按下载量换算28

Gemini CLI

8.61%
按下载量换算12

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

未通过

权限和风险

执行命令

安装流程涉及命令执行,可能通过 npx skills add https://github.com/jacehwang/harness --skill address-findings 联网下载 Skill 或依赖。用户安装前应确认命令来源、仓库内容和执行环境。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果,不能写成本站确认安全。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills