Generates structured pitfall reports for code diffs and change lists.
npx skills add https://github.com/tho/skills --skill review-tho
Please help me install this Agent Skill. Skill: review Source: https://github.com/tho/skills/tree/main/skills/review Command: npx skills add https://github.com/tho/skills --skill review-tho
This Skill helps you review code changes effectively so you can catch correctness, security, and design risks before a merge.
Use the review skill to review a PR diff and generate a structured report with lens-grouped findings focused on real risks.
High-intent search queries and answers about installing and using this skill.
To perform a structured code review, select the diff scope, collect commit intent and repository context, load relevant review lenses, and generate a report with concrete findings on correctness, security, and design risks.
Assess merge readiness by evaluating staged or unstaged changes against stated intent, applying review lenses to identify correctness and safety risks, and producing a structured report to determine if the code is safe to merge.
Lens-driven code review applies specific perspectives like security and architecture to a diff, reporting only concrete issues with clear impact and suggested fixes to accurately assess PR risks before merging.
Yes, you can review branch diffs and commit changes by applying review lenses to check correctness, safety, and design risks, ensuring the implementation matches the stated intent and meets merge quality standards.
When the code diff review scope is ambiguous, ask a clarifying question to determine whether to review staged changes, unstaged changes, or the full PR diff before loading review lenses and generating findings.
Evidence-first judgment uses available context like commit messages, PR descriptions, or issues to understand stated intent before evaluating whether the implementation matches it, ensuring accurate merge readiness assessment.
jsco2tWalk through code changes from PRs, commit ranges, branches, or file lists.
dmae97Inspect pull request diffs and generate merge recommendations with risk classification.
macaughDetects injection, memory safety and authorization flaws in multiple languages.
RedHatProductSecurityExecute Bandit, Gosec, and Scorecard security scans in isolated containers.
