MartinoPolo/mp-review-changes
_archive/skills-deprecated/mp-review-changes/SKILL.md
Read-only review of uncommitted changes via subagents. Use when: "review changes", "review uncommitted"
$ install --global
skillsauthnpx skillsauth add MartinoPolo/mpx-claude-code mp-review-changesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 10:22 AM6.9s1 file scanned
SKILL.md
- name:
- mp-review-changes
- description:
- Read-only review of uncommitted changes via subagents. Use when: "review changes", "review uncommitted"
- disable-model-invocation:
- true
- allowed-tools:
- Read, Write, Glob, Grep, Bash(git status *), Bash(git diff *), Bash(git diff --cached *), Task
- author:
- MartinoPolo
- version:
- 0.2
- category:
- code-review
Review Uncommitted Changes
Resolve uncommitted scope, run reviewer, write report.
This review is READ-ONLY except report creation. It does NOT:
- post to GitHub
- modify source files
- make commits
Workflow
- Collect change scope (
git diff+git diff --cached) - If no changes, exit
- Spawn 3 parallel subagents with resolved scope:
mp-reviewer-code-qualitymp-reviewer-best-practicesmp-reviewer-spec-alignment
- Write returned findings to
REVIEW-CHANGES.md
Review Dispatch Logic
Pass:
- Scoped diff (preferred) or changed file list
- Original task/spec text when available
- Detected stack/conventions context
Output Policy
- high-confidence issues only
- include location + reasoning + suggested fix
- order sections exactly:
- Critical
- Important
- Minor (optional)
Report shape (REVIEW-CHANGES.md)
- Actionable Checklist
- Critical items with file/line, why, and concrete fix
- Important items with file/line, why, and concrete fix
- Nice-to-Have
- Minor non-blocking observations
Constraints
- Read-only review (except writing
REVIEW-CHANGES.md) - No source edits
DO NOT create the file if no issues are found. Only report in the conversation.
Related Skills
MartinoPolo/mpx-show-project-status
tools
VerifiedTrustedCommunity
Show current project progress. Displays phase status and next steps. Use when: "show status", "project progress", "what's done"
1SKILL.mdUpdated Jul 28, 2026
MartinoPolo/mpx-setup
data-ai
VerifiedTrustedCommunity
Unified project setup. Auto-detects state and orchestrates mpx skills/agents for init, conversion, or restructure.
1SKILL.mdUpdated Jul 28, 2026
MartinoPolo/mpx-report-issue-or-bug
testing
VerifiedTrustedCommunity
Track bugs/issues in .mpx/ phase system. Parses reports, finds related phases, adds fix tasks or creates bugfix phases. Use when: "track this bug", "add issue to project", "log this bug", "add bug to checklist"
1SKILL.mdUpdated Jul 28, 2026
MartinoPolo/mpx-project-workflow
development
VerifiedTrustedCommunity
Project workflow guidance for spec-driven development. Background knowledge auto-loaded when relevant.
1SKILL.mdUpdated Jul 28, 2026