MartinoPolo/mp-review-branch
_archive/skills-deprecated/mp-review-branch/SKILL.md
Read-only branch review via subagents. Use when: "review branch", "review my changes"
$ install --global
skillsauthnpx skillsauth add MartinoPolo/mpx-claude-code mp-review-branchInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 10:22 AM9.0s1 file scanned
SKILL.md
- name:
- mp-review-branch
- description:
- Read-only branch review via subagents. Use when: "review branch", "review my changes"
- disable-model-invocation:
- true
- allowed-tools:
- Read, Write, Glob, Grep, Bash(git branch --show-current *), Bash(git branch -r *), Bash(git merge-base *), Bash(git diff *), Bash(git log *), Task, AskUserQuestion
- author:
- MartinoPolo
- version:
- 0.2
- category:
- code-review
Branch Review
Shortcut skill: resolve branch scope, run reviewer, write report.
This review is READ-ONLY except report creation. It does NOT:
- post to GitHub
- modify source files
- make commits
Workflow
- Determine current (
git branch --show-current) and base branch (auto-detect viamp-base-branch-detector) - Ask user only when base is ambiguous
- Build diff scope (
git diff <base>...HEAD) - Spawn 6 parallel subagents with resolved scope:
mp-reviewer-code-qualitymp-reviewer-best-practicesmp-reviewer-spec-alignmentmp-reviewer-securitymp-reviewer-performancemp-reviewer-error-handling
- Write returned findings to
REVIEW-BRANCH.md
Review Dispatch Logic
Pass:
- branch diff scope (
<base>...HEAD) - original task/spec text when available
- detected stack context
Output Policy
- high-confidence issues only
- include location + reasoning + suggested fix
- order sections exactly:
- Critical
- Important
- Minor (optional)
Constraints
- Read-only review (except writing
REVIEW-BRANCH.md) - No source edits
Report Shape (REVIEW-BRANCH.md)
- Actionable Checklist
- Critical: must-fix findings
- Important: should-fix findings
- Nice-to-Have
- Minor non-blocking notes
DO NOT create the file if no issues are found. Only report in the conversation.
Related Skills
MartinoPolo/mpx-show-project-status
tools
VerifiedTrustedCommunity
Show current project progress. Displays phase status and next steps. Use when: "show status", "project progress", "what's done"
1SKILL.mdUpdated Jul 28, 2026
MartinoPolo/mpx-setup
data-ai
VerifiedTrustedCommunity
Unified project setup. Auto-detects state and orchestrates mpx skills/agents for init, conversion, or restructure.
1SKILL.mdUpdated Jul 28, 2026
MartinoPolo/mpx-report-issue-or-bug
testing
VerifiedTrustedCommunity
Track bugs/issues in .mpx/ phase system. Parses reports, finds related phases, adds fix tasks or creates bugfix phases. Use when: "track this bug", "add issue to project", "log this bug", "add bug to checklist"
1SKILL.mdUpdated Jul 28, 2026
MartinoPolo/mpx-project-workflow
development
VerifiedTrustedCommunity
Project workflow guidance for spec-driven development. Background knowledge auto-loaded when relevant.
1SKILL.mdUpdated Jul 28, 2026