diyu-code-reviewer

Analyze Python and TypeScript diffs for security, layer, and port-contract violations.

Updated Jul 11, 2026
One-click install
npx skills add https://github.com/andyan77/diyu-agent --skill diyu-code-reviewer
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: diyu-code-reviewer
Source: https://github.com/andyan77/diyu-agent/tree/main/.claude/skills/diyu-code-reviewer
Command: npx skills add https://github.com/andyan77/diyu-agent --skill diyu-code-reviewer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manual code reviews are slow and error-prone; this Skill automates a triple-guard review of code changes to detect security issues, architectural violations, and contract mismatches.

Core Features & Use Cases

  • Guarded diff analysis: checks security, layer, and port-contract rules on code changes.
  • Output: generates a prioritized, human-readable Markdown report suitable for PR discussions and governance traceability.
  • Use Case: run on PRs to automatically surface critical violations before merge, or as a stand-alone audit on commits.

Quick Start

Review the latest git diff and generate a structured risk report for the changed files.

Frequently Asked Questions about diyu-code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review for pull requests to check security and architecture?

Automating code review for pull requests involves analyzing diffs against security, layer, and port-contract constraints. This Skill evaluates Python and TypeScript changes, applying triple-guard checks to generate a prioritized Markdown report for governance traceability.

What is static analysis for layer and port-contract violations in code diffs?

Static analysis for layer and port-contract violations examines code diffs to enforce architectural guardrails. It checks whether changes violate predefined layer dependencies or port contracts, detecting structural mismatches and security issues before merging.

Can I use automated diff analysis for both Python and TypeScript projects?

Yes, automated diff analysis supports both Python and TypeScript projects. The triple-guard code review evaluates backend and frontend code changes across these languages, checking for security, architectural layer, and port-contract violations.

How do I generate a Markdown report for code review findings in a pull request?

Generate a Markdown report for code review findings by running triple-guard diff analysis on your pull request. The Skill outputs a prioritized, human-readable Markdown document grading security, layer, and port-contract violations suitable for PR discussions.

Does this automated code review work on individual commits or only pull requests?

Automated code review works on both individual commits and pull requests. You can run the triple-guard diff analysis as a stand-alone audit on recent commits or integrate it to surface critical violations in PRs before merging.

What are the limitations of using diff-based static analysis for code reviews?

A limitation of diff-based static analysis is that it evaluates only changed code lines, potentially missing context-level architectural issues in the surrounding unchanged codebase. It focuses strictly on security, layer, and port-contract violations within the diff itself.