code-review

Review Git diffs and pull requests for bugs, regressions, and security risks.

126|11|Updated Feb 24, 2026
One-click install
npx skills add https://github.com/HybridAIOne/hybridclaw --skill code-review-hybridaione
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/HybridAIOne/hybridclaw/tree/main/skills/code-review
Command: npx skills add https://github.com/HybridAIOne/hybridclaw --skill code-review-hybridaione

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you reduce engineering risk by systematically reviewing code diffs for bugs, regressions, security issues, and missing tests before changes ship.

Core Features & Use Cases

  • Diff-first, evidence-backed review: Uses file-level context and validation signals (tests/lint/build/typecheck) rather than speculation.
  • Severity-ordered findings: Produces structured output that prioritizes the most serious risks first, then open questions, then a brief summary.
  • Supports local changes and GitHub PRs: Applies a consistent workflow whether reviewing your current checkout or an open pull request.
  • Common regression targets: Flags behavior changes, state/data/migration issues, secret handling/auth mistakes, and risky coupling or side effects.

Quick Start

Ask the assistant to review the current GitHub pull request “123” for regressions, security risks, and missing tests, and to respond with findings ordered by severity plus open questions and a brief summary.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a git diff for security risks and regressions before merging?

Reviewing a git diff for security risks involves systematically analyzing file-level changes to catch bugs, state issues, and missing tests. This process prioritizes severity-ordered findings, citing specific file locations to ensure evidence-backed inspection before merging.

Can I use this to check missing test coverage in a GitHub pull request?

Yes, you can check missing test coverage in a GitHub pull request by applying a consistent diff review workflow. It flags validation gaps and behavior changes, ensuring that open pull requests are inspected for missing tests alongside security and regression risks.

What is the best way to analyze code changes for behavior updates and migration issues?

The best way to analyze code changes for migration issues is through evidence-first diff inspection. This approach targets risky coupling, data migration problems, and secret handling mistakes, producing structured findings ordered by severity to highlight critical risks.

Does code review work for both local branch changes and open GitHub pull requests?

Code review works for both local branch changes and open GitHub pull requests. It applies a consistent workflow across refactors, behavior updates, and migrations, delivering severity-ordered findings and open questions regardless of the source.

How do I identify risky side effects and coupling in a code refactor?

To identify risky side effects and coupling in a code refactor, inspect the change set for behavior changes and validation gaps. The review process flags risky couplings and side effects, recommending targeted repo-native checks to verify engineering quality.

What should a structured code review output include to satisfy engineering quality requirements?

A structured code review output should include severity-ordered findings, open questions, and a brief summary to satisfy engineering quality requirements. It must cite specific files and locations, prioritizing the most serious risks first based on evidence from tests and linting.