skills.rest
bbvch-ai
bbvch-aiOFFICIAL
Explore all skills by this author →
GitHub

review-diff

Review feature branch diffs against main for security and standards.

9|2|Updated Nov 29, 2024
Search Tags:#code review#python#coding standards#security audit#ai infrastructure#git diff#pre-pr
One-click install
npx skills add https://github.com/bbvch-ai/aihub-core --skill review-diff-bbvch-ai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review-diff
Source: https://github.com/bbvch-ai/aihub-core/tree/main/.claude/skills/review-diff
Command: npx skills add https://github.com/bbvch-ai/aihub-core --skill review-diff-bbvch-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manual code reviews before pull requests are time-consuming, inconsistent, and often miss critical issues like security vulnerabilities, architecture violations, or non-compliant coding patterns, leading to production bugs, rework, and delayed releases.

Core Features & Use Cases

  • Comprehensive Diff Analysis: Reviews all changes between the current feature branch and main, covering architecture boundaries, coding standards, OWASP Top 10 security, NATS event patterns, and test coverage.
  • Severity-Ranked Feedback: Organizes findings into Critical, Important, and Suggestions categories with exact file/line references and actionable fix recommendations.
  • Use Case: A developer building a new agent feature in the Swiss AI-Hub core stack can run this skill before opening a PR to automatically catch cross-scope import violations, missing permission checks, and non-compliant event naming, reducing back-and-forth with senior reviewers.

Quick Start

Use the review-diff skill to review all changes on your current feature branch against main before opening a pull request.

Frequently Asked Questions about review-diff

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate pre-PR code review for Python AI infrastructure?▼

You can automate pre-PR code review by running a comprehensive diff analysis between your feature branch and main to validate architecture boundaries, OWASP security, and test coverage. This delivers severity-ranked feedback with specific file and line references to prevent production issues.

What does an automated git diff code review check for?▼

An automated git diff code review checks all changes between your feature branch and main for architecture boundary violations, coding standard non-compliance, OWASP Top 10 security vulnerabilities, NATS event pattern adherence, and missing test coverage for new code.

Can I use this pre-PR code review skill for non-Python projects?▼

No, this pre-PR code review skill is specifically designed for Python-based AI infrastructure development workflows. It validates Python coding standards, architecture boundaries, and specific event patterns tailored to Python environments.

What is the best way to catch OWASP security vulnerabilities before a pull request?▼

The best way to catch OWASP security vulnerabilities before a pull request is to run an automated diff analysis that checks compliance against the OWASP Top 10. This provides severity-ranked feedback with exact file and line references to fix issues early.

How do I get actionable feedback on cross-scope import violations in my feature branch?▼

To get actionable feedback on cross-scope import violations in your feature branch, run a comprehensive diff review against the main branch. The review identifies architecture boundary violations and provides specific file and line references to reduce review overhead.

Related Skills

Explore More Software Engineering Skills→
jrmatherlyjrmatherly
1

shipit-kit:merged

Delete merged local git feature branches and update feature metadata.

Community
Intermediate
MovchanetsMovchanets

code-review-excellence

Review pull requests with severity-ranked findings on correctness, security, performance, and maintainability.

Community
Advanced
alangebalangeb

git-verify

Analyze git diff statistics and scan for debug artifacts.

Community
Intermediate
do360nowdo360now

secure-code-review

Analyze source code repositories for vulnerabilities and OWASP ASVS compliance.

Community
Advanced