bjornmelin/review-remediation
skills/review-remediation/SKILL.md
Fix local review (Codex, Zen, notes) w/ verify. Not gh-pr-review-fix or passive PR monitoring.
$ install --global
skillsauthnpx skillsauth add bjornmelin/dev-skills review-remediationInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 12, 2026, 3:02 AM18.7s4 files scanned
SKILL.md
- name:
- review-remediation
- description:
- Fix local review (Codex, Zen, notes) w/ verify. Not gh-pr-review-fix or passive PR monitoring.
Review Remediation
Use this skill to normalize review inputs, turn them into an actionable checklist, and then fix the valid findings with repo-native verification.
Modes
local-review: ingest a local review note filecodex-review: ingest local Codex review outputzen-review: ingest local Zen review output
Workflow
- Read the repo
AGENTS.md. - Normalize the review source:
- Local file ->
codex-dev --json review ingest --source <file> --kind codex|zen|manual --out <json>
- Local file ->
- Render a concise summary:
codex-dev --json review render --worklist <json>
- Build the remediation order:
- correctness and safety first
- review threads grouped by file or subsystem
- minimal change that fully resolves the finding
- Verify with repo-native checks before considering a finding done.
- If the workflow becomes passive PR monitoring, switch to
codex-dev --json pr readinessplus GitHub status checks.
Use When
- The user asks to address local review findings end-to-end.
- Review data exists in files but needs normalization before implementation.
Do Not Use When
- The user wants unresolved GitHub PR review threads fetched and fixed.
- The user wants a passive or continuous PR watcher.
- The task is only a docs drift pass or only a dependency plan.
Outputs
- normalized review bundle
- short prioritized remediation summary
- verified fixes with concise reporting
Resources
references/local-review.mdreferences/verification.md
Related Skills
bjornmelin/multi-model-review
development
VerifiedTrustedCommunity
Pre-PR multi-model review, parallel opus and codex exec adversarial lanes, then adversarial verification of merged findings. Read-only. Use before shipping nontrivial diffs.
3SKILL.mdUpdated Jul 23, 2026
bjornmelin/codex-review
tools
VerifiedTrustedCommunity
Independent gpt-5.6 diff review via the Codex CLI, normal or steerable adversarial with JSON findings. Use before shipping nontrivial changes.
3SKILL.mdUpdated Jul 23, 2026
bjornmelin/codex-delegate
development
VerifiedTrustedCommunity
Delegate implementation, investigation, or bulk work to gpt-5.6 codex via pinned codex exec. Use for clear-spec builds, migrations, debugging, or any task MODELS.md routes to codex.
3SKILL.mdUpdated Jul 23, 2026
bjornmelin/pre-mortem
development
VerifiedTrustedCommunity
Adversarial pre-mortem: imagine the plan failed, work backwards to surface risky assumptions + irreversible bets, then harden them. Proactively offer it (after the current request; confirm first) before a hard-to-reverse or one-way-door call (API, schema, framework, a hire), an all-upside plan, or unvalidated assumptions. Also on request.
3SKILL.mdUpdated Jul 22, 2026