gsd-code-review

Identify and classify bugs, security vulnerabilities, and code quality gaps in phase-scoped code changes.

Updated Jan 28, 2025
One-click install
npx skills add https://github.com/aslaii/dotfiles --skill gsd-code-review-aslaii
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gsd-code-review
Source: https://github.com/aslaii/dotfiles/tree/main/claude/skills/gsd-code-review
Command: npx skills add https://github.com/aslaii/dotfiles --skill gsd-code-review-aslaii

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps engineering teams quickly identify bugs, security issues, and quality problems in code changes made during a phase.

Core Features & Use Cases

  • Analyze phase-scoped changes to surface bugs, security gaps, and code-quality concerns.
  • Generate a phase-level REVIEW.md artifact summarizing findings for review and remediation.
  • Use cases include rapid triage after a commit or pull request and focused investigations during audits.

Quick Start

Provide a phase number to begin an automated code review process.

Frequently Asked Questions about gsd-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate bug and security vulnerability detection in code changes?

To automate bug detection, this skill analyzes phase-scoped code changes to identify and classify bugs, security vulnerabilities, and code quality gaps. It generates a phase-level REVIEW.md artifact summarizing findings for review and remediation.

How does phase-based code review work for pull requests?

Phase-based code review works by analyzing the file-scoped changes made during a specific development phase. You provide a phase number, and the review applies optional depth settings to generate a REVIEW.md artifact with targeted findings.

Can I scope code quality checks to only changed files during an audit?

Yes, you can scope code quality checks to only changed files during an audit. This skill performs file-scoped analysis tailored to phase changes, focusing on surfacing security vulnerabilities and quality concerns specific to those modifications.

Do I need an AI agent to orchestrate automated code reviews?

Yes, this skill satisfies requirements for agent-based orchestration to execute automated code reviews. It parses arguments to initiate the process, analyzing phase-scoped changes to produce a REVIEW.md artifact with findings.

What is the best way to triage security gaps after a commit?

The best way to triage security gaps after a commit is to perform a rapid, phase-based review. This skill analyzes phase-scoped changes to quickly surface bugs and security gaps, generating a REVIEW.md artifact for immediate remediation.

What are the limitations of file-scoped code analysis?

The limitation of file-scoped code analysis is that it confines bug detection and security vulnerability identification to the changed files within a specific phase. It may not detect systemic security gaps existing outside the scoped code changes.