review-handoff

review-handoff is a skill for Claude Code, Codex from Zhangs-11/zs-skills. It costs 133 tokens per session (3,324 once invoked), scanned A, original, MIT.

A tool that prepares code-review handoff notes from one or more CodeUp pull requests, which are proposed code changes awaiting review. It can produce either a short message or a fuller Markdown document in Chinese.

In plain words
What is it for?
Use it to summarize verified requirements, pull requests, acceptance checks, branches, and change details for a colleague.
Why use it?
It saves the next reviewer from reconstructing the task, background, cause, and changes by searching through the repository and request history.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to summarize verified requirements, pull requests, acceptance checks, branches, and change details for a colleague.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/zhangs-11/zs-skills/review-handoff
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Zhangs-11/zs-skills --skill review-handoff
Clone the repo
git clone --depth 1 https://github.com/Zhangs-11/zs-skills

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for review-handoff

README.md
[![agentmods](https://agentmods.dev/badge/skills/zhangs-11/zs-skills/review-handoff/github.svg)](https://agentmods.dev/skills/zhangs-11/zs-skills/review-handoff)
Your own site
<a href="https://agentmods.dev/skills/zhangs-11/zs-skills/review-handoff"><img src="https://agentmods.dev/badge/skills/zhangs-11/zs-skills/review-handoff/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for review-handoff

Your own site · 80×15
<a href="https://agentmods.dev/skills/zhangs-11/zs-skills/review-handoff"><img src="https://agentmods.dev/badge/skills/zhangs-11/zs-skills/review-handoff.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 133 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,324 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00133 $0.03324
Opus 5 $0.00067 $0.01662
Sonnet 5 $0.00027 $0.00665
Haiku 4.5 $0.00013 $0.00332

Measured 12d ago against content hash 045b67aadf99, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

review-handoff scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

review-handoff/SKILL.md · 223 lines

How it starts

The opening of the file, as written. The whole thing — 223 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Review 交接内容

目标是让同事不用重新考古需求,也不用逐文件猜作者意图,就能快速进入真正的代码审查。输出必须忠于已验证事实,同时让不了解这块业务的人一遍读懂。

输入

通常包括:

  • 一个或多个 CodeUp PR 链接;
  • 需求背景、问题现象或 OA 需求/缺陷 ID;
  • 作者判断的根因和修复方案;
  • 可选的验收 project ID、源分支、环境、日志、测试和上线信息。

用户可能把元信息粘贴成列表、diff 代码块、HTML 转义文本或带断行的链接。先归一化格式,再识别以下字段;没有提供的字段不强行补齐:

任务:T-xxxx
需求:D-xxxx
PR:<仓库或服务> CodeUp #<编号> (<链接>)
验收项目:<project ID>
源分支:<branch>

用户可能只给一个或多个 PR,也可能只给零散口述。先从各 PR 描述、关联工作项、提交、真实 diff 和对应仓库恢复可验证信息,不要把能自行获取的内容重新问用户。

只有 PR 无法访问、仓库无法定位,或缺失信息会让文档在“问题是什么/为什么改”上产生两种实质不同的版本时,才请求补充。先自查代码、测试和关联材料,每次只追问一个最上游、最可能改变文档的关键问题;信息足够后立即停止追问。无法验证但不妨碍形成草稿的内容要明确写“待确认”,不能替作者编造。

边界

  • 用户明确要“简略、概要、短版、直接回复、不生成文件”时,在当前对话输出短版;明确要“完整文档、Review 文档、MD、Markdown、保存到目录”时创建完整 Markdown 文件并返回可点击路径。“发群里、可直接复制”只有在没有指定文件形式时才默认短版;例如“发群里的 Review 文档”仍生成文档。只说“Review 说明”且未限定形式时,默认生成完整文档。
  • 不自动修改 PR 描述或向同事发送消息。
  • 不修改业务代码,不评论、通过或合并 PR,不 commit、push 或部署。
  • 不覆盖同名既有文档。优先遵循仓库已有 review-docs/docs/ 或同类目录;没有惯例时保存在当前任务工作区,文件名使用 <需求标识或简短名称>-review.md。重名时使用明确后缀。
  • 不复制 Token、Cookie、凭据、完整 Prompt、大段日志或未脱敏用户数据。
  • 输出只解释本次改动及其一个或多个 PR,不混入未来规划、顺手重构或未经确认的改进建议。

工作流

0. 选择输出模式

先根据用户的交付意图选择一种模式,不把长度偏好反问用户:

  • 简略概要:适合群聊、Review 邀请或 PR 评论前的交接,直接在对话中给出;正文控制在约 150~300 个汉字,元信息不计入。
  • 完整文档:适合让 reviewer 独立理解需求与链路,创建 Markdown 文件;复杂链路可加入具体 Case。

两种模式共享同一套事实核验。简略概要是完整因果链的压缩,不是降低证据标准;信息不足时写“待确认”或省略非关键字段,不用空话凑齐模板。

1. 固定 PR 与仓库

  1. 解析每个 PR 的仓库、源分支、目标分支、patch set 和 commit。
  2. 通过已登录 CodeUp 页面、已配置只读 OpenAPI 或 Git 远端取得真实 diff、PR 描述、提交和 CI 状态。
  3. 涉及远端现状时,先检查工作区、分支和 worktree,再 git fetch;不要覆盖或清理未知改动。
  4. 多仓需求逐个核对,不把一个仓库的改动和验证结果套到另一个仓库。

PR 链接必须放在输出最上方,并明确仓库。完整文档中单仓也使用表格;简略概要中每个 PR 单独一行,方便直接复制。

2. 重建作者意图

分别整理以下内容:

  • 需求背景:哪块功能承担什么业务职责,为什么现在需要改;
  • 问题描述:什么条件下、哪一步出现什么问题、造成什么影响;
  • 问题根因:最早哪个值、状态、分支或机制偏离预期,后续消费者为什么把偏离放大成用户可见问题;
  • 修复方案:在哪个关键节点增加、删除或调整了什么逻辑,为什么能截断根因;
  • 保持不变:哪些正常路径、接口合同或既有行为不应被这次修改改变。

作者原先的解释也要用代码和可用运行事实复核。若只能从 diff 推断根因,写“根据已取得的 PR diff 推断”;若根因依赖某环境配置而未验证,写清缺口。交接文档不能用确定语气包装未闭合因果链。

3. 压缩改动

完整文档用一张“改动前 / 改动后”表表达关键逻辑。表格按链路节点组织,而不是按文件列表组织:

链路 改动前 改动后
状态写入 ... ...
下游消费 ... ...

Read the full file on GitHub · 223 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 12d ago First seen · 223 lines · 133 tokens per session scan A 045b67aadf99

Subscribe to this mod's changes

review-handoff is a skill published in the GitHub repository Zhangs-11/zs-skills (2 stars, last pushed 5d ago), licensed MIT. It adds 133 tokens to every session and 3,324 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.