contentstack/code-review
skills/code-review/SKILL.md
Use when reviewing PRs for contentstack-android—API stability, Gradle, tests, and mobile security.
$ install --global
skillsauthnpx skillsauth add contentstack/contentstack-android code-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 4, 2026, 3:10 AM134.6s1 file scanned
SKILL.md
- name:
- code-review
- description:
- Use when reviewing PRs for contentstack-android—API stability, Gradle, tests, and mobile security.
Code review – contentstack-android
When to use
- Reviewing feature or fix PRs for the Android SDK
- Auditing dependency or manifest changes
Instructions
Checklist
- API: Public SDK surface changes justified and documented.
- Gradle: Version bumps coherent; no accidental signing or secret commits.
- Tests: Unit tests for new logic; consider Robolectric limitations.
- Manifest/resources: No unnecessary permissions; ProGuard rules updated if needed.
- Cross-SDK: Behavior consistent with Java/Swift where applicable.
Severity hints
- Blocker: Broken
:contentstack:testDebugUnitTest, leaked credentials, or broken publish metadata. - Major: Missing coverage for risky network or caching changes.
- Minor: Formatting, comments, internal refactors.
Related Skills
contentstack/dev-workflow
development
VerifiedTrustedCommunity
Use for Gradle tasks, CI, release publishing, and branch flow in contentstack-android.
4SKILL.mdUpdated Jun 4, 2026
contentstack/android
development
VerifiedTrustedCommunity
Use for Android module layout, Gradle config, and Kotlin/Java conventions in contentstack-android.
4SKILL.mdUpdated Jun 4, 2026
contentstack/testing
testing
VerifiedTrustedCommunity
Use for JVM unit tests, Robolectric, AndroidX Test, and JaCoCo in contentstack-android.
4SKILL.mdUpdated Apr 23, 2026
contentstack/framework
tools
VerifiedTrustedCommunity
Use for AGP, Gradle plugins, JaCoCo, signing, and native Android build concerns in contentstack-android.
4SKILL.mdUpdated Apr 23, 2026