Code Review

Code review, security audits, bug detection, alternative implementations, second opinions via OpenAI Codex. Use when user asks for code review, security analysis, implementation advice, bug detection, code patterns, or wants a second opinion on code. Supports uncommitted changes review. Do not use for architecture design or web searches.

SOLID principles for object-oriented design. Use when reviewing code quality, refactoring, designing classes or interfaces, or discussing architecture patterns.

A code analyzer skill that helps with code quality and best practices

Analyze codebase with parallel mapper agents

Review code changes for quality, security, and best practices

Trail of Bits security skills analysis for Solidity contracts. Use for deep smart contract security review with invariant suggestions.

Produce concise, citation-backed explanations of module behavior, data flow, and important types/APIs.

Review the current changes and provide feedback.

处理代码审查反馈并修复审查中发现的问题。当用户要求修复审查问题、处理 review 反馈时触发。参数为 task-id。

Answer questions about the Velox codebase or pull requests. Use when asked a question via "/query" or when the user wants to understand code, architecture, or implementation details.

A comprehensive code review skill that analyzes code for best practices, potential bugs, security issues, and suggests improvements.

Self-review before submitting a PR. Use when the user wants to review their changes before creating or submitting a pull request.

Checks the internal consistency of a software project, fixes any issues found.

Review items in Sigil quarantine and help decide whether to approve or reject them. Use when scan results are available or when managing quarantined code.

Run Prettier and ESLint to format and fix code

Use when someone asks to apply code style rules, check code style, clean up code style, or follow project code conventions.

Review a system architecture for scalability, reliability, and maintainability. Use when a senior developer needs to critique a design.

Review code for architectural fit, dead code, and complexity. Use when asked to review a module, file, or PR.

Find and fix unsafe error handling in Leavn - try! force unwraps, empty catch blocks, silent try? failures

Reviews documentation for factual accuracy

Reviews documentation for factual accuracy

Fetch and apply review comments from the current PR. Use when you need to address PR feedback.

Remove AI-generated code slop and improve code quality. Use when you need to clean up AI-written code, remove unnecessary defensive patterns, eliminate inconsistent comments, or align code style with the rest of the codebase.

Use this agent when you need to run linting and code quality checks on Ruby and ERB files. Run before pushing to origin.

Read the source of the C module we are working on, before we made any changes.

Integrate RubyCritic to analyze Ruby code quality and maintain high standards throughout development. Use when working on Ruby projects to check code smells, complexity, and duplication. Triggers include creating/editing Ruby files, refactoring code, reviewing code quality, or when user requests code analysis or quality checks.

Deep codebase context analysis like Greptile. Analyzes blast radius of changes, dependency graphs, and architectural consistency. Use when reviewing changes to core utilities, shared libraries, or database models.

Two-stage code review (spec compliance + code quality)

Systematically analyze agent plugins and skills to extract design patterns, architectural decisions, and reusable techniques. Trigger with "analyze this plugin", "mine patterns from", "review plugin structure", "extract learnings from", "what patterns does this plugin use", or when examining any plugin or skill collection to understand its design.

AI-powered codebase security scanner inspired by Claude Code Security. Triggers when the user runs /security-review or asks to scan their code for vulnerabilities, security issues, bugs, exposed secrets, or insecure dependencies. Use this skill whenever the user mentions: security scan, vulnerability check, find bugs, check for SQLi / XSS / injection, exposed API keys, audit dependencies, access control review, or any phrasing like "is my code secure?", "scan this file", "review for security issues", or "check my repo for vulnerabilities". Works across all agentic IDEs: VS Code, Cursor, Windsurf, and any Claude-powered coding environment. Always trigger this skill — even for partial scans on a single file.

Automated PR code review with multi-agent analysis

Brutally honest code review in the style of Linus Torvalds, focusing on data structures, simplicity, and pragmatism. Use when you want critical, no-nonsense feedback that prioritizes engineering fundamentals over style preferences.

Use after completing tasks to review code for quality and spec compliance. Two-stage review: Spec Compliance first, then Code Quality.

Search code repositories for code related to a given code snippet, ranking results by call chain similarity, textual similarity, and functional similarity. Use when finding related code, locating similar implementations, discovering code dependencies, or identifying code that performs similar operations. Outputs ranked file lists with matching code snippets and relevance scores.

Language-agnostic rulebook for producing, reviewing, and improving elegant code. Use when writing new code, refactoring existing code, reviewing code quality, or when user asks for "elegant", "clean", "maintainable", or "well-structured" code. Applies to any programming language or framework.

Use when user runs /neotex-init to deeply scan a codebase and auto-generate organizational knowledge for neotex.

Code review methodology for evaluating implementation changes. Use when reviewing code changes for quality, design, correctness, and maintainability. Focuses on changes made during implementation using Conventional Comments for clear, actionable feedback.

Review changes or PRs against project guidelines

Use when asked to review a PR, or when /review is invoked with a PR number or URL. Performs a focused code review checking for bugs, security, performance, and test gaps, then posts findings as a PR comment and formal GitHub review.

PostgreSQL-specific code review assistant focusing on PostgreSQL best practices, anti-patterns, and unique quality standards. Covers JSONB operations, array usage, custom types, schema design, function optimization, and PostgreSQL-exclusive security features like Row Level Security (RLS).

Agent skill for code-review-swarm - invoke with $agent-code-review-swarm

Validates story implementations through testing, code review, and quality gate assessment. Uses testing skill for execution, checks standards compliance, and creates quality gate decisions (PASS/CONCERNS/FAIL/WAIVED).

Analyzes polyglot codebases with multiple programming languages using PMAT (Pragmatic AI Labs MCP Agent Toolkit). Use this skill when: - Working with projects containing multiple programming languages - Assessing cross-language integration patterns and quality - Understanding language distribution and architectural boundaries - Comparing quality metrics across language ecosystems - Identifying language-specific best practices violations Supports 25+ languages including Rust, Python, TypeScript, JavaScript, Go, C++, Java, Ruby, PHP, Swift, Kotlin, C, C#, Scala, Haskell, Elixir, Clojure, Dart, Lua, R, and more. Provides unified quality assessment across heterogeneous codebases.

Run multi-agent panel audits on codebases. Use when evaluating code quality, running board reviews, or scoring projects against configurable criteria. Triggers on "audit", "evaluate", "review", "score", "panel", "board".

Multi-agent workflow (tracer/resolver/bypass) for secure code review, exploitability triage, and PoC validation in codebases. Use when conducting structured security research or penetration test analysis.

Codebase analysis with A-F grades explained in plain language for non-technical stakeholders. Self-contained iOS/Swift audit. Triggers: "plain talk report card", "stakeholder report", "non-technical audit".

Technical codebase analysis with A-F grades across 9 categories. Self-contained iOS/Swift audit with automated grep scanning, verification, and Issue Rating Tables. Triggers: "tech report card", "grade my codebase", "technical audit".

Read-only static security audit of Claude Code skills, commands, and plugins. Analyzes SKILL.md frontmatter, body content, supporting scripts, and hooks for security risks. Use this skill when the user asks to "audit a skill", "review skill security", "check SKILL.md for risks", "scan a plugin for dangerous patterns", "verify skill safety", "check skill permissions", "analyze skill hooks", "audit a skill from GitHub", "review a remote skill", "check a skill by URL", or needs a security assessment of any Claude Code skill, command, or plugin before enabling it.

Structural audit of implementation plans — dependencies, data flow, ordering, stale artifacts. Runs BEFORE per-phase reviews to catch design-level issues early. Bails on fundamentally broken plans.

Perform exhaustive code reviews using multi-agent analysis, ultra-thinking, and worktrees