code-review

Audit generated code against implementation specs and security standards.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/Pyl-Tech/stream-coding --skill code-review-pyl-tech
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/Pyl-Tech/stream-coding/tree/main/.agents/skills/code-review
Command: npx skills add https://github.com/Pyl-Tech/stream-coding --skill code-review-pyl-tech

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Prevents shipping incorrect behavior by verifying generated code conforms to the written spec, security rules, and language standards, with a Golden Rule that the spec is corrected before code.

Core Features & Use Cases

  • Conformance-first review: Treats review as spec-to-code semantic verification (not style or subjective opinions), reporting divergence as a spec issue first.
  • Deterministic readiness checks: Establishes review scope and confirms CI/merge readiness using PR metadata and git diff context.
  • Security and language guardrails: Checks universal CRITICAL/HIGH items (e.g., auth bypass, injection, XSS) and applies a language-specific review checklist.
  • Spec-to-code semantic gap detection: Reads every relevant file in scope and maps each requirement to exact YES/NO/PARTIAL implementation status, including wiring and test quality.

Quick Start

Ask an AI agent to perform a conformance audit of your pull request using the Stream Coding code-review skill, focusing on Golden Rule divergence and producing the structured report with verdict.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is spec-to-code conformance audit for AI generated code?

A spec-to-code conformance audit verifies that generated code matches the implementation spec, security rules, and language standards by mapping each requirement to exact YES/NO/PARTIAL implementation status, treating divergence as a spec issue first.

How do I perform a semantic code review on a pull request?

Perform a semantic code review by establishing review scope from PR metadata, running automated diagnostics like typecheck and lint, reading full file contents, mapping requirements to implementation status, and generating a divergence-first structured report with a final verdict.

When do I need semantic verification instead of structural code checks?

Semantic verification is needed for PR and local diff review workflows when structural checks are insufficient and you must verify actual behavior across the full module scope to ensure generated code conforms to the written spec.

Does the code review process check for security vulnerabilities like auth bypass and injection?

Yes, the code review process checks universal CRITICAL and HIGH security items including auth bypass, injection, and XSS, while applying a language-specific review checklist to ensure required security standards are met.

How do I verify test quality and CI readiness during a pull request review?

Verify test quality and CI readiness by establishing review scope from git diff context, confirming merge readiness using PR metadata, applying evaluator separation safeguards, and mapping requirement implementation status including test wiring.

What happens when generated code diverges from the implementation spec?

When generated code diverges from the implementation spec, the Golden Rule dictates that the spec is corrected before the code, and the divergence is reported first as a spec issue through a structured divergence-first reporting workflow.