Conducts code reviews, security audits, and compliance checks on demand.
npx skills add https://github.com/AbyssCN/xihe --skill review-abysscn
Please help me install this Agent Skill. Skill: review Source: https://github.com/AbyssCN/xihe/tree/main/skills/review Command: npx skills add https://github.com/AbyssCN/xihe --skill review-abysscn
This Skill simplifies the process of conducting in-depth code reviews and security audits, streamlining the validation of code changes and ensuring compliance with standards.
Run the review command with the appropriate mode, e.g., /review --security to initiate a security review.
High-intent search queries and answers about installing and using this skill.
To conduct an on-demand code review before merging, run the review command with the appropriate mode, such as `/review --security`. This initiates a detailed code analysis and security audit to catch potential issues early.
A cross-model review is an optional mechanism that leverages additional models to validate code changes. It works by applying multiple specialist lenses to the code analysis, providing added confidence in the review results.
Yes, you can use specialist lenses to perform compliance checks and security audits. This Skill utilizes these lenses to provide comprehensive code analysis tailored to specific security and compliance requirements.
You need a security audit after a security incident to validate code changes and ensure compliance with standards. This Skill applies specialist lenses to conduct in-depth post-incident reviews and catch potential vulnerabilities.
Yes, this code review process requires code analysis tools and access to additional models if you opt for cross-model review. These dependencies are necessary to conduct in-depth audits and apply specialist lenses effectively.
The best way to perform a pre-Gate code review is to run the review command on-demand, utilizing specialist lenses for comprehensive analysis. This ensures code changes are validated and meet compliance standards before proceeding.
PP-NamiasExecute and interpret seven security checks in CI/CD pipelines.
protofireAudit smart contracts with Slither, Echidna, and Foundry fuzz testing.
leonardoteodorooConfigure Semgrep, SonarQube, and CodeQL for CI/CD security scanning.
RangeyRoverRun static analysis across multiple languages and generate prioritized issue reports.
