bjg4/code-review
bakeoff/fixtures/v5/code-review/code-review/SKILL.md
Review pull requests for bugs, security issues, and maintainability problems with structured findings. Use when reviewing PRs, diffs, or code changes. Do NOT use for writing new features from scratch.
$ install --global
skillsauthnpx skillsauth add bjg4/bgskillz code-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 12, 2026, 3:01 AM15.4s1 file scanned
SKILL.md
- name:
- code-review
- description:
- Review pull requests for bugs, security issues, and maintainability problems with structured findings. Use when reviewing PRs, diffs, or code changes. Do NOT use for writing new features from scratch.
Code Review
Quick start
Read the diff or code snippet. Produce findings grouped by severity (critical, major, minor). Each finding: location, issue, suggested fix.
Workflow
- Scan for security issues first (injection, auth, secrets, unsafe defaults).
- Check correctness and error handling paths.
- Assess maintainability (naming, duplication, missing tests).
- Output structured review — not a rewrite unless asked.
Output format
## Critical
- [file:line] Issue — suggested fix
## Major
...
## Minor
...
Error handling
If code context is missing, ask for the diff or file. If outside review scope, say so and suggest the right skill.
Related Skills
bjg4/bgskillz
development
VerifiedTrustedCommunity
Create S-tier portable skills and agents with comprehensive quality guidance. Use when creating or improving skills, designing multi-agent orchestration workflows, auditing agent quality, running evals, or learning agent-building best practices. Covers the full lifecycle from use case definition through automated evaluation, review, and iteration. Do NOT use for general coding tasks, writing documentation unrelated to agents/skills, or building applications.
1SKILL.mdUpdated Jun 12, 2026
bjg4/bgskillz
development
VerifiedTrustedCommunity
Create S-tier portable skills and agents with comprehensive quality guidance. Use when creating or improving skills, designing multi-agent orchestration workflows, auditing agent quality, running evals, or learning agent-building best practices. Covers the full lifecycle from use case definition through automated evaluation, review, and iteration. Do NOT use for general coding tasks, writing documentation unrelated to agents/skills, or building applications.
1SKILL.mdUpdated Jun 12, 2026
bjg4/bgskillz
development
VerifiedTrustedCommunity
Create S-tier portable skills and agents with comprehensive quality guidance. Use when creating or improving skills, designing multi-agent orchestration workflows, auditing agent quality, running evals, or learning agent-building best practices. Covers the full lifecycle from use case definition through automated evaluation, review, and iteration. Do NOT use for general coding tasks, writing documentation unrelated to agents/skills, or building applications.
1SKILL.mdUpdated Jun 12, 2026
bjg4/grill-me
development
VerifiedTrustedCommunity
Stress-test a plan or design through Socratic questioning until shared understanding. Use when the user says "grill me", wants to stress-test a plan, or review a design. Do NOT use for implementation or code generation.
1SKILL.mdUpdated Jun 12, 2026