Claude Code: Agent Skills 与 skill-creator

# 普通指令
> 审查这个文件的代码质量

Claude Code: [自由审查，可能遗漏某些方面]

# 使用 Skill
> /skill code-review

Claude Code: [按 code-review Skill 的流程执行]
  Step 1: 读取文件 ✓
  Step 2: 安全性检查 ✓
    - SQL 注入 ✓
    - XSS 漏洞 ✓
    - 敏感数据暴露 ✓
  Step 3: 性能检查 ✓
    - N+1 查询 ✓
    - 内存泄漏 ✓
  Step 4: 风格检查 ✓
  Step 5: 生成报告 ✓
  All checkpoints passed

# 列出可用 Skills
claude /skills

# 安装社区 Skill
claude /skill install @community/pr-review

# 卸载 Skill
claude /skill uninstall pr-review

# 查看 Skill 详情
claude /skill info code-review

> /skill bug-fix "TypeError: Cannot read property 'id' of undefined at UserController.getProfile"

Claude Code [bug-fix Skill]:
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  Bug Fix Workflow
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  Step 1: 定位 Bug ✓
    → Reading src/controllers/UserController.ts
    → Found: getProfile() accesses req.user.id without null check

  Step 2: 分析根因 ✓
    → req.user 为 undefined when auth middleware fails silently
    → Root cause: missing error handling in middleware chain

  Step 3: 设计修复 ✓
    → Add null check in getProfile()
    → Fix auth middleware to throw on failure

  Step 4: 实施修复 ✓
    → Modifying src/controllers/UserController.ts
    → Modifying src/middleware/auth.ts

  Step 5: 验证修复 ✓
    → Running: npm test -- UserController.test.ts
    → 5/5 tests passed ✓

  Step 6: 防止复发 ✓
    → Added edge case test for null user

  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  Bug fixed ✓ | 2 files modified | 1 test added
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

> /skill security-audit src/auth/

Claude Code [security-audit Skill]:

  Step 1: 扫描认证相关文件 ✓
    → Found 6 files in src/auth/

  Step 2: 检查常见漏洞 ✓
    🔴 Critical: Hardcoded JWT secret in jwt.ts:12
    🟡 Warning: No rate limiting on login endpoint
    🟡 Warning: Password reset token has no expiry
    🟢 Info: bcrypt hash rounds OK (12)

  Step 3: 检查配置安全 ✓
    🟡 Warning: CORS allows all origins

  Step 4: 生成报告 ✓
    → Critical: 1 | Warning: 3 | Info: 1
    → Report saved to security-report-2026-08-28.md

  Step 5: 建议修复（可选）✓
    → Fix all? [y/n] y
    → Fixed 4/5 issues (1 requires manual config change)

# .claude/skills/my-deployment.yaml
name: deployment
description: "标准化部署流程"
trigger:
  keywords: ["deploy", "部署", "上线"]

steps:
  - name: "预检查"
    actions:
      - "确认所有测试通过"
      - "检查没有未提交的变更"
      - "验证环境变量配置"
    checkpoints:
      - "npm test exit code = 0"
      - "git status clean"
      - ".env 文件存在"

  - name: "构建"
    actions:
      - "运行构建命令"
      - "检查构建产物大小"
    checkpoints:
      - "build/ 目录存在"
      - "bundle size < 2MB"

  - name: "部署"
    actions:
      - "推送代码到远程"
      - "触发 CI/CD 流水线"
    checkpoints:
      - "git push 成功"
      - "CI pipeline 触发"

  - name: "验证"
    actions:
      - "等待部署完成"
      - "访问健康检查端点"
      - "验证核心功能"
    checkpoints:
      - "HTTP 200 from /health"
      - "登录功能正常"

output:
  format: "markdown"
  template: "deployment-report"

> /skill-creator 创建一个"数据库迁移"Skill

Claude Code:
  我将帮你创建一个数据库迁移 Skill。
  请回答几个问题：

  1. 使用什么数据库工具？ Prisma
  2. 迁移需要哪些步骤？
     - 修改 schema
     - 生成迁移文件
     - 运行迁移
     - 验证数据完整性
  3. 有什么安全检查？
     - 备份数据库
     - 检查迁移是否可回退
  4. 输出格式？ Markdown 报告

  → Creating .claude/skills/db-migration.yaml
  → Skill created ✓

  使用方式：/skill db-migration

# .claude/skills/db-migration.yaml
name: db-migration
description: "Prisma 数据库迁移标准流程"
trigger:
  keywords: ["migrate", "迁移", "schema变更"]

steps:
  - name: "备份"
    actions:
      - "运行 pg_dump 备份数据库"
    checkpoints:
      - "备份文件存在且大小 > 0"

  - name: "修改 Schema"
    actions:
      - "修改 prisma/schema.prisma"
    checkpoints:
      - "npx prisma validate 成功"

  - name: "生成迁移"
    actions:
      - "npx prisma migrate dev --name <description>"
    checkpoints:
      - "迁移文件生成成功"
      - "SQL 语句可回退"

  - name: "执行迁移"
    actions:
      - "npx prisma migrate deploy"
    checkpoints:
      - "迁移执行成功"
      - "数据完整性检查通过"

  - name: "验证"
    actions:
      - "运行全量测试"
      - "检查应用启动正常"
    checkpoints:
      - "npm test 全部通过"
      - "应用健康检查通过"

output:
  format: "markdown"
  include: ["迁移SQL", "影响范围", "回退方案"]