spec-first:review

Automate two-stage code reviews with compliance checks before quality assessment.

72|9|Updated Mar 1, 2026
One-click install
npx skills add https://github.com/sunrain520/spec-first --skill spec-first-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spec-first:review
Source: https://github.com/sunrain520/spec-first/tree/main/skills/spec-first/08-review
Command: npx skills add https://github.com/sunrain520/spec-first --skill spec-first-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the code review process by first ensuring compliance with established standards and then assessing code quality, streamlining the path to production readiness.

Core Features & Use Cases

  • Two-Stage Review: Conducts a mandatory compliance check followed by a quality assessment.
  • Traceability Verification: Ensures all code changes are correctly mapped to requirements (TASK/FR/DS).
  • Quality Dimensions: Evaluates code against SOLID principles, security, performance, and testing best practices.
  • Use Case: Before merging a new feature, run this Skill to automatically verify that all code adheres to project standards and identify potential bugs or performance bottlenecks.

Quick Start

Run the review skill to analyze the current code changes for compliance and quality.

Frequently Asked Questions about spec-first:review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate traceability verification for code changes during a code review?

Traceability verification is automated by mapping all code changes to established requirements like TASK, FR, or DS before assessing code quality. This ensures compliance with project standards and verifies that every modification is correctly linked to its originating requirement.

What is a compliance-first code review process and how does it work?

A compliance-first code review process enforces mandatory process gates and traceability checks before evaluating code quality dimensions like SOLID principles and security. This two-stage mechanism ensures adherence to established standards first, streamlining the path to production readiness.

How do I check if my code changes adhere to SOLID principles, security, and performance standards before merging?

You can check adherence to SOLID, security, performance, and testing standards by running an automated quality assessment after compliance is verified. This secondary review stage evaluates the code against these specific dimensions and outputs categorized findings.

Can I use this automated code review to identify must-fix issues and production readiness bottlenecks?

Yes, automated code review identifies production readiness bottlenecks by outputting findings categorized as MUST FIX, SHOULD FIX, or OUT_OF_SCOPE. It evaluates quality dimensions like performance and security to highlight exactly which issues need immediate attention before merging.

Does this automated code review require any specific CI/CD pipeline dependencies to run?

No specific CI/CD pipeline dependencies are required to run this automated code review. It operates independently to conduct the two-stage compliance and quality assessment, allowing you to analyze code changes for production readiness without external pipeline integrations.

When should I not use a compliance-first approach for auditing code changes?

You should not use a compliance-first auditing approach when your code changes lack established requirements like TASK, FR, or DS mappings. Without these traceability references, the mandatory compliance checks cannot verify adherence to process gates and standards.