skills.rest
quanthubbr
quanthubbrOFFICIAL
Explore all skills by this author →
GitHub

code-review

Reviews staged git diffs or GitHub pull requests and reports findings by severity.

Updated Jul 14, 2026
Search Tags:#git#diff analysis#code review#pull request#security#github#gh cli
One-click install
npx skills add https://github.com/quanthubbr/tron-claude-config --skill code-review-quanthubbr
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/quanthubbr/tron-claude-config/tree/main/managed/skills/code-review
Command: npx skills add https://github.com/quanthubbr/tron-claude-config --skill code-review-quanthubbr

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Unreviewed code reaches commits and pull requests with security flaws, logic errors, and style violations that are costly to fix later. This Skill enforces a structured review gate on local changes or GitHub PRs before code is committed or merged. ## Core Features & Use Cases - Local Review Mode: Inspects staged or working-tree diffs via git commands and checks for security issues (hardcoded credentials, injection, XSS), correctness problems (null handling, race conditions, missing error handling), and best-practice violations. - PR Review Mode: Fetches pull request metadata and diffs with the GitHub CLI, applies the same checklist plus pattern compliance and performance checks, then publishes an APPROVE, REQUEST_CHANGES, or BLOCK decision via gh pr review. - Severity-Gated Decisions: Blocks the commit path when CRITICAL or HIGH findings remain, and passes with notes when only MEDIUM/LOW issues exist. - Use Case: Before running /commit-changes, a developer triggers a local review of staged changes; the Skill flags a hardcoded API key as CRITICAL and blocks the commit until it is removed. ## Quick Start Ask the AI to run a code review on your current staged changes, or pass a PR number or URL to review a GitHub pull request.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review staged changes before committing with git?▼

Run the code review with no arguments to enter Local Review Mode. It gathers staged changes via git diff, checks each file against security and correctness checklists, and reports findings in a severity table that blocks the commit if CRITICAL or HIGH issues remain.

How to review a GitHub pull request from the command line?▼

Pass a PR number or URL as the argument to enter PR Review Mode. The Skill fetches metadata and the diff with gh pr view and gh pr diff, reviews the changes, and posts an APPROVE or REQUEST_CHANGES decision using gh pr review.

What security issues does automated code review detect?▼

It detects hardcoded credentials, API keys, and tokens, SQL and command injection, XSS and unsanitized HTML, missing input validation on trust boundaries, path traversal, and secrets exposed in logs or error messages, all classified as CRITICAL severity.

Does the code review work without the GitHub CLI installed?▼

Local Review Mode works with git alone and needs no additional tools. PR Review Mode requires the gh CLI to fetch and publish reviews; without it, the Skill reports findings locally only and warns that publishing was skipped.

When does the code review block a commit?▼

The review blocks the commit path whenever any CRITICAL or HIGH severity finding remains unfixed, such as security vulnerabilities or logic errors. Reviews with only MEDIUM or LOW findings pass with notes, and clean reviews pass outright.

Related Skills

Explore More Software Engineering Skills→
MS33834MS33834

Single-Flow PR Yeet

Stages, commits, pushes, and opens a GitHub pull request for a linear change.

Community
Advanced
lithiumtoastlithiumtoast
1

commit

Stage and commit a single logical change after three-gate manual approval.

Community
Advanced
goodstoriesworldgoodstoriesworld

security-audit

Audit codebases for OWASP Top 10 vulnerabilities and generate structured reports.

Official
Advanced
TeiNamTeiNam
12

laravel-verification

Automate Laravel project verification for CI/CD pipelines.

Community
Advanced