davidkdickson/review
agent/skills/review/SKILL.md
Review the current diff for bugs, security issues, and code quality concerns
$ install --global
skillsauthnpx skillsauth add davidkdickson/dotfiles reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 26, 2026, 2:44 AM237.6s1 file scanned
SKILL.md
- name:
- review
- description:
- Review the current diff for bugs, security issues, and code quality concerns
- disable-model-invocation:
- true
- allowed-tools:
- Bash, Read, Grep, Glob
Review
Review the current diff for bugs, security issues, and code quality concerns.
Steps
-
Gather changes
- Run
git diffto see unstaged changes - Run
git diff --cachedto see staged changes - If no local changes exist, diff against the base branch
- Run
-
Review for issues
- Bugs and logic errors
- Security vulnerabilities (injection, auth issues, data exposure)
- Edge cases and error handling gaps
- Performance concerns
-
Provide feedback
- List issues by severity (critical, warning, suggestion)
- Reference specific files and line numbers
- Suggest a fix for each issue
- If no issues found, confirm the changes look good
Related Skills
davidkdickson/watch-pr-checks
testing
VerifiedTrustedCommunity
Watch the current pull request's checks and notify when they complete
1SKILL.mdUpdated May 26, 2026
davidkdickson/watch-deploy
devops
VerifiedTrustedCommunity
Watch the most recent Deploy workflow run and notify when it completes
1SKILL.mdUpdated May 26, 2026
davidkdickson/agent/skills/todo-opez
tools
VerifiedTrustedCommunity
--- name: todo-opez description: List open todo items from the "💥 Todo: Opez" Apple Notes note allowed-tools: mcp__apple-notes__get_note_content --- # Todos Opez Fetch and display open todo items from Apple Notes, preserving the note's existing structure. ## Steps 1. Read the note named "💥 Todo: Opez" using the Apple Notes plugin 2. Display the items as they are in the note, preserving the **Now** and **Someday** sections 3. Do not reformat or restructure — present items exactly as written
1SKILL.mdUpdated May 26, 2026
davidkdickson/agent/skills/todo-opez-clean
tools
VerifiedTrustedCommunity
--- name: todo-opez-clean description: Restructure the "💥 Todo: Opez" Apple Notes note into the standard format with typed, sectioned items allowed-tools: mcp__apple-notes__get_note_content, mcp__apple-notes__update_note_content, AskUserQuestion --- # Todos Cleanup Opez Restructure the "💥 Todo: Opez" note to match the standard todo format. ## Standard Format The note should have two sections with typed, bulleted items: ``` ## Now - feat: Mailbox should be per tenant and how OTP is handled
1SKILL.mdUpdated May 26, 2026