codebase-review

Plan and manage risk-prioritized codebase reviews with auditable findings.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/hack-ink/skills --skill codebase-review-hack-ink
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: codebase-review
Source: https://github.com/hack-ink/skills/tree/main/codebase-review
Command: npx skills add https://github.com/hack-ink/skills --skill codebase-review-hack-ink

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of conducting thorough, repeatable, and auditable reviews of large or rapidly evolving codebases where traditional file-by-file pull request reviews are insufficient.

Core Features & Use Cases

  • Systematic Risk Assessment: Builds a risk register to prioritize review efforts based on impact, likelihood, and exposure.
  • Scoped Execution: Allows for flexible scope definition using explicit file lists or dynamic Git pathspecs.
  • Auditable Findings: Tracks findings with severity, evidence, and reviewer assignments, ensuring accountability.
  • Use Case: Before a major release of a complex microservice, use this Skill to systematically identify and mitigate high-risk areas across the entire codebase, ensuring predictable assurance and auditable evidence.

Quick Start

Initialize a new review campaign in the current directory by copying the template artifacts.

Frequently Asked Questions about codebase-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a risk-prioritized codebase review and when do I need it?

A systematic codebase review evaluates code by building a risk register to prioritize efforts based on impact and likelihood. You need it for large or rapidly evolving codebases where standard pull request reviews are insufficient.

How do I conduct a systematic codebase analysis before a major release?

Initialize a review campaign to define scope using file lists or Git pathspecs. The methodology builds a risk register, plans review slices, and manages findings with auditable evidence tied to exact file revisions for predictable assurance.

Can I use this code review methodology with my existing CI/CD pipelines?

Yes, the code review methodology integrates with CI/CD pipelines to enforce forward gates and branch protection rules. This ensures codebase analysis findings automatically block deployments if high-risk issues are detected.

Best way to track codebase auditing findings for accountability?

The best way to track codebase auditing findings is using a methodology that records severity, evidence, and reviewer assignments. This ensures accountability by tying auditable review evidence directly to exact file revisions.

Does codebase risk assessment work with dynamic Git pathspecs for scope definition?

Yes, codebase risk assessment supports flexible scope definition using both explicit file lists and dynamic Git pathspecs. This allows you to target specific components or directories during the codebase analysis process.

Why does standard pull request review fail for large codebases?

Standard pull request review fails for large codebases because it lacks risk prioritization and systematic scope definition. A full codebase review methodology solves this by building a risk register and planning review slices based on impact.