review

Reviews code changes against skill registries and reports severity-ordered bad practices with required refactors.

4|Updated Jul 30, 2026
One-click install
npx skills add https://github.com/gabriellst/codm --skill review-gabriellst
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/gabriellst/codm/tree/main/.claude/skills/review
Command: npx skills add https://github.com/gabriellst/codm --skill review-gabriellst

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Code reviews often miss architectural violations because reviewers must manually classify files, trace dependencies, and remember every bad-practice rule. This Skill automates that groundwork by running a deterministic dependency-graph analysis first, then checking each changed file against the relevant skill's registry.yaml of patterns and bad practices, producing consistent, actionable findings. ## Core Features & Use Cases - Graph-Based Pre-Analysis: Runs a graph CLI once per review to classify every changed node (controller, use case, entity, SDK hook), resolve direct and transitive dependencies, and compute blast radius before reading any code. - Registry-Driven Rule Matching: Matches implementations against each skill's registry.yaml patterns and bad practices, plus cross-cutting critical rules like enum-over-string in Zod schemas and avoiding unnecessary as casts. - Structured Findings Output: Produces a fixed report with Status (APPROVED or CHANGES_REQUESTED), severity-ranked findings with file:line locations, required refactors, newly discovered bad practices, and a coverage section proving every layer was traced. - Use Case: After implementing a feature spanning a React route, SDK hook, controller, and use case, run this review to verify schema reuse, dependency direction, and contract consistency across the transitive downstream before merging. ## Quick Start Ask the AI to review the current diff against the base branch using the review workflow and report any bad practices with severity levels.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a code diff for architectural bad practices?

Run the graph review CLI once against the diff to get node classifications and dependency edges, then match each changed file against its skill's registry.yaml patterns and bad practices. Report findings severity-ordered with file:line and a required refactor for each.

How to check Zod schemas for enum violations in code review?

Verify every z.string() field in controller and use case input/output schemas that represents a fixed value set uses z.enum(MyEnum) instead. Plain strings where domain enums exist are rated Blocker severity because they break type safety.

What does the graph review JSON output contain?

It contains a registries map with pre-parsed patterns and bad practices per skill, plus per-file nodes with kind, context, direct incoming/outgoing edges, resolved peer locations, and transitive downstream counts with kind histograms for blast-radius analysis.

When is a review verdict CHANGES_REQUESTED versus APPROVED?

The verdict is CHANGES_REQUESTED if any Blocker or Major finding exists, such as unnecessary type casts or missed schema reuse. APPROVED is returned only when no refactor-required bad practice remains.

What happens when a finding is not covered by the registry?

Add a new bad-practice entry to the relevant skill's registry.yaml with the next sequential number, including the wrong code pattern, a correct alternative, and severity. Report it under the New Bad Practices Added section of the output.