etanhey/review-router
skills/golem-powers/_archive/review-router/SKILL.md
Dynamic code review routing with automatic fallback chain when primary reviewer is unavailable. Routes to CodeRabbit, Macroscope, requesting-code-review, or Cursor CLI. Triggers on: 'review-router', 'route review', 'reviewer unavailable'. NOT for: general code review workflow (use /code-review), receiving review feedback (use /superpowers:receiving-code-review).
$ install --global
skillsauthnpx skillsauth add etanhey/golems review-routerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 1, 2026, 3:47 AM349.8s2 files scanned
SKILL.md
- name:
- review-router
- description:
- Dynamic code review routing with automatic fallback chain when primary reviewer is unavailable. Routes to CodeRabbit, Macroscope, requesting-code-review, or Cursor CLI. Triggers on: 'review-router', 'route review', 'reviewer unavailable'. NOT for: general code review workflow (use /code-review), receiving review feedback (use /superpowers:receiving-code-review).
Review Router
Routes reviews to available tools with automatic fallback. The overnight sprint had CodeRabbit rate-limited and Greptile expired on 4/5 golems PRs. Workers fell back randomly. This skill defines the deterministic fallback chain.
Note: Greptile was evaluated but excluded — expired tokens are not auto-recoverable overnight.
Fallback Chain (in order)
-
CodeRabbit (
coderabbit:code-reviewersubagent orcr review --plain)- Check:
cr --versionsucceeds AND no rate limit in last 5 min - Timeout: 120 seconds
- On failure: log "CodeRabbit unavailable: {reason}", fall through
- Check:
-
Macroscope (GitHub App — posts as PR comment)
- Check:
gh api repos/{owner}/{repo}/installationsincludes Macroscope - Timeout: 300 seconds (it's slow)
- On failure: log "Macroscope unavailable", fall through
- Check:
-
superpowers:requesting-code-review (Claude subagent)
- Check: always available (it's a subagent)
- Cost: ~50K tokens per review
- On failure: should not fail, but if it does, fall through
-
Cursor CLI — Red/Blue Profiles (external tool — read-only audit mode)
- Check:
cursor --versionsucceeds <cursor-max-mode-model>below: substitute Cursor's current Max Mode model ID (verify viacursor agent --helpor the Cursor changelog — IDs change between versions; the user's preference is Cursor on Auto, but Red/Blue audits historically pin to Max Mode for harsher critique).- Red Team (security/reliability):
cursor agent --output-format text --model "<cursor-max-mode-model>" "$(cat ~/.claude/commands/code-review/references/red-team-prompt.md | sed 's/{{REPO_CONTEXT}}/...context.../') DIFF: $(gh pr diff)" - Blue Team (quality/architecture):
cursor agent --output-format text --model "<cursor-max-mode-model>" "$(cat ~/.claude/commands/code-review/references/blue-team-prompt.md | sed 's/{{REPO_CONTEXT}}/...context.../') DIFF: $(gh pr diff)" - Timeout: 180 seconds per profile
- Run BOTH for comprehensive coverage (replaces single generic prompt)
- On failure: WARN — all reviewers exhausted, post to collab and wait
- See
/code-reviewworkflows:workflows/red-team.mdandworkflows/blue-team.md
- Check:
All Reviewers Exhausted
If all 4 tiers fail:
- Log each failure reason
- Post a BLOCKED message in the collab file
- Do NOT merge without review — wait for human or tool recovery
Minimum Review Requirement
2 independent reviews before merge. Preferred: 1 red team + 1 blue team. If only 1 reviewer tool is available, run it with both profiles:
- Pass 1: Red team prompt (security, reliability, crash scenarios)
- Pass 2: Blue team prompt (architecture, quality, test coverage)
Deduplicate findings: red H findings take priority over blue suggestions on the same code.
H/M/L Classification (from overnight retro)
After collecting review findings, classify each:
- HIGH/CRITICAL → Fix immediately, block merge
- MEDIUM → Fix before merge if <15 min effort, else document as follow-up
- LOW → Merge, create follow-up issue if warranted
Usage
# In /pr-loop, after PR creation:
/review-router
# Standalone:
/review-router --pr 42 --repo golems
Related Skills
etanhey/writing-skills
development
VerifiedTrustedCommunity
Create, edit, and verify golem-powers skills using the standard SKILL.md structure, workflow files, adapters, templates, and eval fixtures. Use for new skills, structural edits, workflows/adapters, and pre-deploy validation. NOT for invoking existing skills, superpowers skills, or skill-creator agent workflows.
3SKILL.mdUpdated Jun 4, 2026
etanhey/video-extract
testing
VerifiedTrustedCommunity
Extract structured knowledge from any video source — YouTube URLs or local screen recordings. YouTube → gems workflow (yt-dlp transcript → keyword hotspots → frame extract → brain_digest → structured gems). Screen recordings → QA workflow (reuses /qa-video stalker pipeline). Use when user shares a YouTube link wanting deep extraction with frames, shares a .mov/.mp4 for QA processing, says "extract from video", "video gems", "process this recording", or mentions gem extraction from video content.
3SKILL.mdUpdated Jun 4, 2026
etanhey/monitor-loop
testing
VerifiedTrustedCommunity
Use when running or reviewing any recurring monitor loop for merge queues, worker queues, collab tails, or agent completion. Enforces drive-to-completion ticks: every tick must query live state with `!`, classify whether real progress happened, and then dispatch, verify-and-decrement, or escalate-park. Triggers on: monitor loop, /loop, recurring tick, keep monitoring, silent autonomous, merge gate, blocked review, no-progress loop.
3SKILL.mdUpdated Jun 4, 2026
etanhey/mehayom
tools
VerifiedTrustedCommunity
MeHayom freelance client management — daily updates, decision tracking, time logging. Use when drafting Yuval updates, logging scope changes, tracking hours, or any MeHayom client communication. Triggers: 'draft Yuval update', 'client update', 'daily update', 'log decision', 'track time', 'mehayom'.
3SKILL.mdUpdated Jun 4, 2026