project-review-orchestrator

Orchestrates multi-phase repository reviews with external critique, reconciliation, and task DAG dispatch.

Updated Aug 22, 2026
One-click install
npx skills add https://github.com/xegheplimo-web/hermes-ops --skill project-review-orchestrator-xegheplimo-web
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: project-review-orchestrator
Source: https://github.com/xegheplimo-web/hermes-ops/tree/main/skills/software-development/project-review-orchestrator
Command: npx skills add https://github.com/xegheplimo-web/hermes-ops --skill project-review-orchestrator-xegheplimo-web

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires openai, psycopg2-binary, and includes scripts (resource) and references (resource) components.

What problem does it solve? Auditing a real software project before implementation requires collecting trustworthy repository evidence, challenging internal analysis with an independent reviewer, and turning verified findings into bounded implementation tasks — a process that is error-prone and ungoverned when done ad hoc. ## Core Features & Use Cases - Deterministic Evidence Collection: Gathers git state, files, languages, tests, CI config, and churn into repo-evidence.json bound to an exact commit SHA. - Independent External Review: Sends a secret-redacted review packet to Codex CLI (read-only sandbox) or the OpenAI API, then reconciles every finding as AGREE/PARTIAL/DISAGREE/NEW/UNVERIFIED. - Governed Task Decomposition and Dispatch: Labels analysis claims FACT/INFERENCE/UNKNOWN, decomposes accepted findings into an acyclic task DAG, and dispatches to Devin behind a run-level circuit breaker with cost budgets. - Use Case: Before refactoring a legacy service, run the full pipeline to produce an evidence-grounded audit, an independent critique, a reconciled findings list, and a Devin-ready task plan — all tracked by a 14-state state machine. ## Quick Start Ask the agent to run the project-review-orchestrator against the current repository to collect evidence, obtain an independent review, and produce a dispatchable task plan.

Frequently Asked Questions about project-review-orchestrator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a full automated repository review with an external AI reviewer?

Run collect_repo_evidence.py to snapshot the repo, write a Hermes analysis, build a redacted packet with build_review_packet.py, then call codex_review.py for the external critique. Finally reconcile findings, decompose tasks, and dispatch to Devin.

Codex CLI vs OpenAI API for external code review — which should I use?

Codex CLI is the default reviewer and runs with a read-only sandbox using a ChatGPT Plus login. The OpenAI API via openai_review.py is the fallback when Codex is unavailable, selected with --adapter openai.

Does the external reviewer get access to secrets in my repository?

No. build_review_packet.py recursively redacts both the analysis and the evidence snapshot using secret patterns for API keys, tokens, private keys, and connection-string passwords, and emits a SHA-256 digest of the sanitized packet.

What happens when dispatch to Devin keeps failing?

A run-level circuit breaker trips after consecutive failures, a high failure rate, or cost budget exhaustion, returning exit code 4. Fix the systemic cause and re-run with --reset-breaker rather than looping on dispatch.

Can unverified analysis claims become implementation tasks?

No. claim_classifier.py labels every claim FACT, INFERENCE, or UNKNOWN; UNKNOWN claims become investigation tasks only, and DISAGREE findings never become implementation tasks.