avifenesh/code-review
skills/code-review/SKILL.md
Use when user asks to review code, check for bugs, review a PR, audit code quality, or find security issues. Keywords: review, audit, check, bugs, security, style, PR
$ install --global
skillsauthnpx skillsauth add avifenesh/cairn code-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 3, 2026, 12:00 PM192.5s1 file scanned
SKILL.md
- name:
- code-review
- description:
- Use when user asks to review code, check for bugs, review a PR, audit code quality, or find security issues. Keywords: review, audit, check, bugs, security, style, PR
- inclusion:
- on-demand
- allowed-tools:
- cairn.readFile,cairn.listFiles,cairn.searchFiles,cairn.gitRun
Code Review
Systematic code review workflow:
- Scope — Identify files to review. Use
cairn.gitRunwithdiff --name-onlyto find changed files, orcairn.listFilesto explore. - Read — Read each file with
cairn.readFile. Understand the context. - Analyze — Check for:
- Bugs: Logic errors, nil/null dereferences, off-by-one, race conditions
- Security: Injection (SQL, XSS, command), auth bypass, SSRF, hardcoded secrets
- Style: Naming conventions, dead code, unnecessary complexity
- Performance: N+1 queries, unbounded allocations, missing indexes
- Report — Present findings grouped by severity (critical > high > medium > low).
Output Format
For each finding:
- File:Line — location
- Severity — critical/high/medium/low
- Issue — what's wrong
- Fix — how to fix it
Related Skills
avifenesh/pr-stall-detector
data-ai
VerifiedTrustedCommunity
Detect agent-cairn PRs that have stalled (no activity >=90 min) and classify the failure mode to route to appropriate recovery agent.
4SKILL.mdUpdated Apr 12, 2026
avifenesh/installer
tools
VerifiedTrustedCommunity
Post-install skill adaptation: read a newly installed SKILL.md, fix environment-specific references (paths, accounts, tool names), assign the skill to relevant agent types, and propose an AGENTS.md update. Triggered automatically after cairn.installSkill completes.
4SKILL.mdUpdated Apr 12, 2026
avifenesh/growth-brief
data-ai
VerifiedTrustedCommunity
Monthly self-improvement brief for Cairn. Queries error_patterns, action_exemplars, experiment_windows, and session_journal to synthesize what Cairn learned, where it failed, and 3 concrete proposals for Avi to approve. Run on the 1st of each month. Keywords: growth brief, monthly review, self-improvement, what did cairn learn, how is cairn doing, monthly report
4SKILL.mdUpdated Apr 12, 2026
avifenesh/decision-support
testing
VerifiedTrustedCommunity
Decision support with memory-backed context. Retrieves past decisions, journal history, and relevant facts before answering questions that involve a choice or tradeoff. Keywords: should I, which is better, tradeoff, compare, decide, choose, option, alternative, pros and cons, recommend
4SKILL.mdUpdated Apr 12, 2026