review

Audit codebases for security, dead code, and test gaps with evidence.

Updated May 14, 2026
One-click install
npx skills add https://github.com/bonjohen/claude-local --skill review-bonjohen
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/bonjohen/claude-local/tree/main/bundle/skills/review
Command: npx skills add https://github.com/bonjohen/claude-local --skill review-bonjohen

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you perform a rigorous, evidence-based audit of a codebase so you can identify and prioritize security issues, dead code, inconsistencies, documentation drift, and test gaps that are worth fixing now.

Core Features & Use Cases

  • Structured multi-category review: Runs an opinionated protocol to investigate security, dead code & stale artifacts, documentation drift, test gaps, consistency & standards, architecture smells, and deployment & operations.
  • Evidence-verified findings: Requires concrete proof (file paths, line references, and command/grep outputs) for every reported issue so nothing is hand-wavy.
  • Actionable remediation plan: Produces a prioritized findings document with an executable remediation plan grouped by critical/high, medium, and low severity.
  • Scope control via argument: Lets you narrow the review to full, security, consistency, or hygiene for faster, targeted audits.

Quick Start

Run the review with the full scope to generate an evidence-backed, prioritized findings document for the current codebase.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an evidence-based codebase review for security and architecture risks?

An evidence-based codebase review validates each security problem, architecture smell, and operational risk with concrete proof like file paths and grep outputs. This Skill runs a multi-phase protocol to investigate your codebase and outputs a prioritized findings document with remediation tasks.

Can I scope a code audit to only check for security vulnerabilities or documentation drift?

Yes, you can scope a code audit by passing an argument to narrow the review. You can target full, security, consistency, or hygiene scopes, allowing faster targeted audits that focus only on specific categories like documentation drift or dead code.

What is the best way to identify dead code and test gaps in a codebase?

The best way to identify dead code and test gaps is to run a structured multi-category review protocol. This process investigates stale artifacts and test coverage gaps, requiring concrete evidence for every reported issue before writing the results into a prioritized findings file.

How does a structured code review generate a remediation plan?

A structured code review generates a remediation plan by validating findings with concrete evidence and grouping them by severity. It writes a prioritized findings document to docs/review-YYYY-MM-DD.md, containing executable remediation tasks grouped by critical, high, medium, and low severity.

Does this code review tool require external dependencies to check for inconsistencies?

No, this code review tool requires no external dependencies to check for inconsistencies. It applies an opinionated, multi-phase protocol directly to your codebase to investigate consistency, standards, and deployment risks without needing additional components.

When should I not use a full codebase review?

You should not use a full codebase review when you only need to address a specific category like security or consistency. Instead, use the scope control argument to run a targeted audit, saving time by skipping unrelated categories like documentation drift or operational risks.