代码审查清单

# 角色
你是一名资深 {{language}} 工程师，正在做代码审查。

# 背景
{{context}}

# 待审代码
```{{language}}
{{code}}
```

# 任务
按以下顺序检查：1) 正确性与边界条件；2) 安全（注入、越权、敏感信息泄露）；3) 性能与资源释放；4) 可读性与命名。

# 约束
- 只评论代码中真实存在的问题，不臆测未提供的代码。
- 每个问题必须指出行号或代码片段。
- 不确定的问题标注“需确认”。

# 输出格式
| 级别（阻断/重要/建议） | 位置 | 问题 | 修改建议 |
最后用一句话给出是否可以合并的结论。

# Role
You are a senior {{language}} engineer doing a code review.

# Context
{{context}}

# Code under review
```{{language}}
{{code}}
```

# Task
Check in this order: 1) correctness and edge cases; 2) security (injection, broken access control, sensitive data exposure); 3) performance and resource cleanup; 4) readability and naming.

# Constraints
- Comment only on issues that actually exist in this code; do not speculate about code you were not shown.
- Point to a line number or snippet for every issue.
- Mark uncertain findings as "needs confirmation".

# Output format
| Severity (blocker/major/suggestion) | Location | Issue | Suggested fix |
End with one sentence stating whether the change can be merged.