skills.rest
cheafi
cheafiCOMMUNITY
Explore all skills by this author →
GitHub

review

Review code changes for spec compliance, quality, and security vulnerabilities.

Updated Feb 23, 2026
Search Tags:#security#quality-gate#code-review#spec-compliance#performance-analysis#severity-ranking
One-click install
npx skills add https://github.com/cheafi/Trading-bot-CC --skill review-cheafi
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/cheafi/Trading-bot-CC/tree/main/.github/skills/review
Command: npx skills add https://github.com/cheafi/Trading-bot-CC --skill review-cheafi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you identify issues and determine whether a code change meets the intended specification and quality expectations before merging.

Core Features & Use Cases

  • Severity-rated findings: Produces CRITICAL / HIGH / MEDIUM / LOW issues to make prioritization clear during reviews.
  • Mode-driven analysis: Supports default review plus focused checks for style, performance, or release-quality readiness.
  • Structured workflow: Compiles results from spec compliance/quality checks and security vulnerability detection into a single verdict for action.

Quick Start

Use the review skill to run a full two-stage code review on your latest changes and get a final APPROVE / REQUEST CHANGES decision.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review for spec compliance and security vulnerabilities?▼

Run a two-stage code review to surface spec compliance gaps, quality problems, and security vulnerabilities. This generates severity-rated CRITICAL to LOW issue reports with fix suggestions and a final APPROVE or REQUEST CHANGES verdict.

What is the best way to get severity-ranked actionable feedback on a pull request?▼

Get severity-ranked actionable feedback by executing a structured code review across file and line numbers. The analysis outputs CRITICAL, HIGH, MEDIUM, or LOW issues with specific fix suggestions to help prioritize pull-request merging decisions.

Can I run a focused performance analysis or release-quality check instead of a full code review?▼

Yes, you can run focused performance analysis or release-quality checks. The review supports mode-driven analysis, allowing you to target style, performance, or release-quality readiness instead of executing the default comprehensive review.

How do I identify if a code change meets intended specifications before merging?▼

Identify if a code change meets intended specifications by evaluating spec compliance during the change-review workflow. The process compiles results from quality checks and vulnerability detection into a clear verdict to determine merge readiness.

Does the automated code review provide a clear approve or request changes decision?▼

Yes, the automated code review provides a clear decision. It compiles spec compliance, quality, and security findings into a single actionable output, issuing an APPROVE, REQUEST CHANGES, or COMMENT verdict to guide merging.

Related Skills

Explore More Software Engineering Skills→
JsplixJsplix

code-review-pr-body

Generate structured pull request body drafts from git diffs.

Community
Intermediate
mshaheerzmshaheerz
1

review-merge-readiness

Review git diffs against project plans and requirements for merge readiness.

Community
Intermediate
voidrotvoidrot

sast-configuration

Configure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.

Community
Intermediate
eliottbusinesseliottbusiness

requesting-code-review

Automate pre-commit code review with static analysis and security scanning.

Community
Advanced