对 microsoft/apm 的标记 PR 发起多专家联合审查并给出综合建议
该技能材料显示其为开源、prompt-only 的审查编排技能,本身不要求额外密钥或自建外部端点,整体风险较低。需注意它的设计目标是驱动宿主代理在 GitHub PR 上读取内容并执行评论/移除标签等写操作,因此更适合作为受限场景下的审查辅助。
材料声明无需密钥或环境变量,未见要求用户提供额外 token、API key 或长期凭证。若实际运行依赖宿主环境已有 GitHub 身份,那属于平台侧认证而非该技能自带凭证收集逻辑,材料中未见明显凭证滥用指令。
虽未声明自定义远程端点,但技能目标明确是对 GitHub Pull Request 进行审查,并通过一次评论与移除标签来写回 PR 状态,因此会把审查内容发送到 GitHub 这一预期服务。未见向不明第三方端点外发数据的描述。
材料描述其通过 `task` 工具启动多个子代理线程并汇总 JSON 结果,未见要求执行本地 shell、安装程序或调用高权限系统能力。就所给信息看,它更像提示词级编排,而非直接本机代码执行组件。
该技能面向已标记的 PR 做多角色审查,意味着会读取 PR 相关内容,且 orchestrator 被设计为对 PR 执行一次评论和移除若干标签的写操作。访问范围主要围绕仓库审查上下文,未见索取与功能无关的本地文件或系统级广泛数据访问。
正面因素是来源于 GitHub 上的 microsoft/apm 开源仓库,源码可审计,这显著降低了供应链不透明风险。需留意的是仓库 star 为 0、维护状态未知、许可证未声明,社区验证与治理信息较弱,因此仍建议在纳入生产流程前做额外人工审查。
复制安装指令,让 AI 自动完成配置 · 推荐新手
请帮我安装 askskill 上的 "apm-review-panel" 技能: 1. 下载 https://raw.githubusercontent.com/microsoft/apm/main/packages/apm-review-panel/SKILL.md 2. 保存为 ~/.claude/skills/apm-review-panel/SKILL.md 3. 装好后重载技能,告诉我可以用了
请对 microsoft/apm 中这个已标记的非简单 PR 运行 apm-review-panel,重点审查架构影响、CLI 日志、开发者体验、供应链安全与发布风险,并输出一条综合建议评论。
一条汇总多位专家意见的 PR 建议评论,列出主要发现、优先级后续事项与建议是否可发布。
请对这个已标记且修改了 src/ 的 PR 运行 apm-review-panel,除常规专家外重点检查测试覆盖充分性、回归风险和实现质量,最后只输出一条建议评论。
一条包含测试覆盖评估、风险提示和改进建议的综合评论,不添加结论标签或阻止合并。
请对这个已标记 PR 运行 apm-review-panel。该变更同时影响用户文档和运行性能,请纳入文档编写与性能专家视角,综合判断是否适合当前版本发布,并给出后续优先级建议。
一条结合文档、性能及其他专家意见的 CEO 式综合建议,帮助维护者权衡发布决策。
The panel is FAN-OUT + SYNTHESIZER. Each persona runs in its own agent
thread (via the task tool) and returns JSON matching
assets/panelist-return-schema.json. The orchestrator schema-validates
each return, hands all returns to the apm-ceo synthesizer (also a task
thread, returns JSON matching assets/ceo-return-schema.json), then
renders ONE recommendation comment from assets/recommendation-template.md.
This skill is ADVISORY by design. It does not compute a binary verdict, it does not apply verdict labels, and it does not gate merge. The panel surfaces findings; the maintainer and the PR author decide ship.
APPROVE / REJECT,
no panel-approved / panel-rejected label, no deterministic verdict
computation. The CEO returns a ship_recommendation.stance (ship_now
/ ship_with_followups / needs_discussion / needs_rework); this is
prose for the human reviewer, never auto-applied as a label or status
check. This is the architectural fix for the previous regime's
over-strictness: removing the binary gate removes the incentive for
panelists to inflate required[] defensively.severity: blocking | recommended | nit. blocking is the highest
signal a panelist can send and renders prominently in the comment; it
still does not block merge. recommended is the default for substantive
feedback. nit is one-line polish. The orchestrator never reads
severity to gate anything.add-comment and one remove-labels call. The
remove-labels call always sweeps panel-review (trigger
idempotency) AND defensively removes panel-approved /
panel-rejected if present (legacy verdict labels from the
pre-advisory regime; they have no meaning here and would mislead
readers if left on a PR after a fresh advisory pass). NO add-labels
call -- there are no verdict labels to apply. Panelist subagents and
the CEO subagent return JSON only and MUST NOT call any gh write
command, post comments, apply labels, or touch the PR state.assets/recommendation-template.md after all subagents
return.| Agent | Role | Always active? |
|---|---|---|
| Python Architect | Architectural Reviewer + supplies mermaid diagrams | Yes |
| CLI Logging Expert | Output UX Reviewer | Yes |
| DevX UX Expert | Package-Manager UX | Yes |
| Supply Chain Security Expert | Threat-Model Reviewer | Yes |
| OSS Growth Hacker | Adoption Strategist | Yes |
| Auth Expert | Auth / Token Reviewer | Conditional (see below) |
| Doc Writer | Documentation Reviewer | Conditional (see below) |
| Test Coverage Expert | Test-Presence Reviewer (paired with DevX UX) | Yes (skipped only on docs-only PRs -- see below) |
| Performance Expert | Package-Manager Performance Reviewer | Conditional (see below) |
| APM CEO | Strategic Arbiter / Synthesizer | Yes |
apm-review-panel SKILL (orchestrator thread)
|
FAN-OUT via task tool (panelists in parallel)
|
+-----+-------+-------+-----+-----+------+-----------+----------+
v v v v v v v v v (cond.)
py cli dx-ux sec grw auth doc-writer test-cov
…
核查回答是否有文档依据,帮助发现未被资料支持的内容与引用问题。
将文档影响判定细化为逐页逐段的同步执行任务清单
帮助团队制定 APM 项目定位、发布沟通与破坏性变更决策策略。
对整套技术文档逐页对照源码审计,并给出精准过时内容修复建议
优化命令行输出、日志与报错文案,提升终端交互可读性与诊断体验
帮助开发团队快速分诊 microsoft/apm 新开或待分诊问题并生成统一处理意见
批量梳理并分诊 APM 仓库问题,将明确事项推进到可合并 PR。
为 microsoft/apm 的拉取请求自动撰写结构完整、证据充分的 PR 描述。
从正确性、测试、安全与性能等维度进行深入代码审查并给出改进建议
帮助团队处理 apm 项目的定位调整、发布沟通与破坏性变更决策。
在每次 PR 变更时评估文档影响,并给出可落地的更新建议。
调用多模型交叉审查代码变更、PR与高风险修改,辅助发现缺陷与争议点