bjg4/code-review
bakeoff/live/v5/code-review/code-review/SKILL.md
Review pull requests for bugs, security issues, and maintainability with severity-grouped findings. Use when reviewing PRs, diffs, or code changes before merge. Do NOT use for implementing features or writing new code.
$ install --global
skillsauthnpx skillsauth add bjg4/bgskillz code-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 12, 2026, 3:01 AM18.9s3 files scanned
SKILL.md
- name:
- code-review
- description:
- Review pull requests for bugs, security issues, and maintainability with severity-grouped findings. Use when reviewing PRs, diffs, or code changes before merge. Do NOT use for implementing features or writing new code.
- license:
- MIT
- author:
- bakeoff-v5
- version:
- 1.0.0
Code Review
Quick start
Read the diff or snippet. Output findings in three buckets: Critical, Major, Minor. Each item: location, issue, suggested fix.
Workflow
- Security first — injection, auth, secrets, unsafe defaults.
- Correctness — logic, null/edge cases, error paths.
- Maintainability — naming, duplication, tests, fit with codebase patterns.
- Performance — only when the change suggests a real concern.
Output template
## Critical
- [file:line] Issue — fix
## Major
...
## Minor
...
Error handling
Missing diff? Ask for git diff output or the file. Out of scope? Say so and stop.
Related Skills
bjg4/bgskillz
development
VerifiedTrustedCommunity
Create S-tier portable skills and agents with comprehensive quality guidance. Use when creating or improving skills, designing multi-agent orchestration workflows, auditing agent quality, running evals, or learning agent-building best practices. Covers the full lifecycle from use case definition through automated evaluation, review, and iteration. Do NOT use for general coding tasks, writing documentation unrelated to agents/skills, or building applications.
1SKILL.mdUpdated Jun 12, 2026
bjg4/bgskillz
development
VerifiedTrustedCommunity
Create S-tier portable skills and agents with comprehensive quality guidance. Use when creating or improving skills, designing multi-agent orchestration workflows, auditing agent quality, running evals, or learning agent-building best practices. Covers the full lifecycle from use case definition through automated evaluation, review, and iteration. Do NOT use for general coding tasks, writing documentation unrelated to agents/skills, or building applications.
1SKILL.mdUpdated Jun 12, 2026
bjg4/bgskillz
development
VerifiedTrustedCommunity
Create S-tier portable skills and agents with comprehensive quality guidance. Use when creating or improving skills, designing multi-agent orchestration workflows, auditing agent quality, running evals, or learning agent-building best practices. Covers the full lifecycle from use case definition through automated evaluation, review, and iteration. Do NOT use for general coding tasks, writing documentation unrelated to agents/skills, or building applications.
1SKILL.mdUpdated Jun 12, 2026
bjg4/grill-me
development
VerifiedTrustedCommunity
Stress-test a plan or design through Socratic questioning until shared understanding. Use when the user says "grill me", wants to stress-test a plan, or review a design. Do NOT use for implementation or code generation.
1SKILL.mdUpdated Jun 12, 2026