skills.rest
MassimilianoPili
MassimilianoPiliCOMMUNITY
Explore all skills by this author →
GitHub

review

Review generated code against OpenAPI specs, security practices, and test coverage.

Updated Mar 7, 2026
Search Tags:#code review#security audit#test coverage#quality gate#artifact validation#contract compliance
One-click install
npx skills add https://github.com/MassimilianoPili/agent-framework --skill review-massimilianopili
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/MassimilianoPili/agent-framework/tree/main/.claude/agents/review
Command: npx skills add https://github.com/MassimilianoPili/agent-framework --skill review-massimilianopili

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill acts as a final quality gate, ensuring all code artifacts meet stringent standards for security, functionality, and adherence to specifications before a plan is marked complete.

Core Features & Use Cases

  • Comprehensive Code Audits: Validates OpenAPI contracts, checks for security vulnerabilities (hardcoded secrets, SQL injection), verifies test coverage, and ensures adherence to architectural patterns.
  • Artifact Integrity: Confirms that all generated files are syntactically valid, correctly placed, and follow platform-specific naming conventions.
  • Use Case: After a development plan generates a new API and its tests, this Skill reviews the code to confirm it matches the OpenAPI spec, has no security flaws, and passes all tests with at least 80% coverage.

Quick Start

Use the review skill to validate the quality of all generated code artifacts for the current plan.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate generated code against an OpenAPI specification?▼

You can validate generated code against an OpenAPI specification by performing a rigorous code review that checks functional integrity, verifies contract compliance, and ensures the backend and frontend artifacts match the defined API endpoints.

What does a security audit check for in generated software artifacts?▼

A security audit for generated software artifacts checks for hardcoded secrets and SQL injection vulnerabilities. It ensures all generated files meet stringent security best practices before the development plan is marked complete.

How do I enforce a minimum test coverage quality gate?▼

You can enforce a minimum test coverage quality gate by applying a validation step that verifies test coverage metrics against a defined threshold, such as 80%, ensuring all generated code passes functional tests before approval.

Can I check artifact integrity and platform-specific naming conventions automatically?▼

Yes, you can check artifact integrity automatically by validating that all generated files are syntactically valid, correctly placed, and follow platform-specific naming conventions during the final quality gate review process.

When do I need a quality gate validation for my development plan?▼

You need a quality gate validation when a development plan generates new APIs and tests, ensuring the output meets architectural patterns, security standards, and functional requirements before the plan is marked complete.

Related Skills

Explore More Software Engineering Skills→
vincent-kkvincent-kk
1

test-generator

Generate Vitest-based unit, integration, and end-to-end test templates from TypeScript/React source files.

Community
Advanced
SjdjdiejdrirhdkjejSjdjdiejdrirhdkjej

staging-deployment-phase

Coordinate staging deployments with migrations, health checks, and verification.

Community
Intermediate
taipt1504taipt1504
3

testing-workflow

Generate and execute a 7-phase testing pipeline for Java Spring applications.

Community
Advanced
PriyanshKuniyalPriyanshKuniyal

sast-configuration

Configures and manages SAST tools for automated vulnerability detection in CI/CD pipelines.

Community
Advanced