reviewer

Review code diffs for correctness, security, and regression risks.

2|2|Updated Mar 17, 2026
One-click install
npx skills add https://github.com/mathiasbourgoin/roster --skill reviewer-mathiasbourgoin
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: reviewer
Source: https://github.com/mathiasbourgoin/roster/tree/main/.agents/skills/reviewer
Command: npx skills add https://github.com/mathiasbourgoin/roster --skill reviewer-mathiasbourgoin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Unstructured code reviews often miss critical correctness regressions, security vulnerabilities, and high-risk issues that lead to production bugs, security breaches, and costly technical debt.

Core Features & Use Cases

  • Risk-oriented review workflow: Checks for language-specific antipatterns, correctness regressions, security and abuse paths, missing tests, and maintainability risks across all files in the diff scope.
  • Severity-ranked findings: Orders all issues from critical to low, with clear location, risk explanation, and concrete fix direction for each finding.
  • Use case: Use this skill after a developer completes a feature implementation to get an actionable, structured review report that eliminates vague feedback and clearly communicates what must be fixed before merging.

Quick Start

Use the reviewer skill to perform a structured risk-oriented review of the latest code diff for the user authentication module, and return findings ordered by severity with an overall approve, changes required, or block recommendation.

Frequently Asked Questions about reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a structured code review for correctness and security vulnerabilities?

A structured code review identifies correctness regressions and security vulnerabilities in code diffs by checking for language-specific antipatterns, missing tests, and maintainability risks. It delivers severity-ranked findings with concrete fix directions and an overall merge recommendation.

What is the best way to review a code diff for regression risks before merging?

Reviewing a code diff for regression risks involves analyzing the changes for correctness issues, security abuse paths, and missing tests across all files in scope. The process outputs findings ordered by severity from critical to low to guide necessary fixes before merging.

Can I use an automated code review to detect language-specific antipatterns in my diff?

Yes, automated risk-oriented code review covers all languages within the diff scope and explicitly checks for language-specific antipatterns. It validates all review dimensions and issues an approve, changes required, or block recommendation based on the findings.

How do I get actionable feedback from a code review instead of vague notes?

To get actionable feedback, a code review must provide severity-ranked findings that include the exact location, risk explanation, and concrete fix direction for each issue. This eliminates vague feedback and clearly communicates what must be fixed.

When do I need a risk-oriented code review workflow?

You need a risk-oriented code review workflow after a developer completes a feature implementation but before merging. It acts as a post-implementation check for tech leads to catch high-risk issues, security vulnerabilities, and technical debt.

Does a structured code review check for missing tests and maintainability risks?

Yes, a structured code review explicitly checks for missing tests and maintainability risks alongside correctness regressions and security vulnerabilities. It validates all review dimensions across the entire diff scope before issuing a final recommendation.