review-code

Review code changes across alignment, correctness, security, quality, testing, docs, and style areas.

4|1|Updated Jul 31, 2025
One-click install
npx skills add https://github.com/alvis/.agents --skill review-code-alvis
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review-code
Source: https://github.com/alvis/.agents/tree/main/plugins/coding/skills/review-code
Command: npx skills add https://github.com/alvis/.agents --skill review-code-alvis

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Code reviews often miss drift from approved plans, lack stable finding tracking across reruns, and lose user confirmation context. This Skill performs a read-only, evidence-bound review of code changes against the canonical work contract, persists findings with stable IDs, and collects user confirmation per problem pattern without ever editing the reviewed code. ## Core Features & Use Cases - Seven-area independent review: One holistic reviewer covers alignment, correctness, security, quality, testing, docs, and style, with optional risk-specific specialists supplying supplemental evidence. - Stable findings and dispositions: Findings use stable IDs and open|fixed|acknowledged|deferred|skipped statuses, persisted under the active work root in review.md and reviews/*.md, surviving partial reruns. - Pattern confirmation and GitHub handoff: Outstanding findings are grouped into patterns, confirmed with the user inline or via interactive discovery, and verified against the remote default branch before suggesting GitHub issue creation. - Use Case: After implementing an authentication refactor, run the review against the current diff to verify alignment with the approved plan, catch security and correctness defects, and confirm each problem pattern before handing eligible ones off as GitHub issues. ## Quick Start Ask the assistant to review the current changes with /review-code --work-id=<your-work-id> and confirm the reported problem patterns.

Frequently Asked Questions about review-code

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code changes against an approved plan?

Run the review with a specifier such as a file path, directory, glob, PR number, or git range plus a work ID. The reviewer compares changed behavior against the canonical state.md task definitions and reports drift, omissions, and defects per area.

How do I review only security or testing aspects of a change?

Pass the --area parameter with a comma-separated list such as security,correctness or testing. Area selection controls coverage only; one holistic reviewer still authors all selected area reports.

Does the code review modify my source files?

No. The review is strictly read-only: reviewers never edit reviewed code, run builds or linters themselves, or write outside their assigned report files. Remediation belongs to a separate fix workflow.

Can I create GitHub issues from review findings?

Yes, but only for user-confirmed problem patterns verified as still present on the remote default branch at an exact commit SHA. Issue drafting and publication are handed off to a dedicated issue skill after explicit user authorization.

Why does a rerun keep old findings instead of resetting them?

Findings use stable IDs and dispositions that persist across reruns. A finding closes only with verified fix evidence or a justified risk disposition, and reopened findings must cite new evidence invalidating the prior disposition.

What happens when the plan changes after a review completed?

Completed findings keep their status but the affected area is treated as stale if a reviewed task's immutable definition changed. The area must be re-reviewed before the review can close.