skills/code-review/SKILL.md
Multi-agent code review for local changes, files, or directories. Detects bugs, security issues, and conventions-file violations (AGENTS.md/CLAUDE.md/GEMINI.md).
npx skillsauth add euxx/claude-skills-for-copilot code-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Provide a code review for the given code changes (e.g. local changes, a file, or a directory).
Make a todo list first, then follow these steps precisely:
Launch 5 parallel sub-agents to independently review the change. Each agent returns a list of issues with the reason flagged (e.g. conventions-file adherence, bug, historical context):
For each issue found in step 2, launch a parallel sub-agent to score it from 0–100 (give this rubric to each agent verbatim):
For issues flagged due to conventions files, double-check that the applicable conventions file actually calls out that issue specifically.
Treat the following as false positives in steps 2 and 3:
### Code review
Found N issues:
1. <brief description> (conventions file says "<...>")
<link to file and line range>
2. <brief description> (some/other conventions file says "<...>")
<link to file and line range>
3. <brief description> (bug due to <file and snippet>)
<link to file and line range>
### Code review
No issues found. Checked for bugs and conventions-file compliance.
testing
Analyzes type design quality by rating encapsulation, invariant expression, usefulness, and enforcement. Helps design types that make invalid states unrepresentable. Use when reviewing new types or data models.
testing
Reviews test coverage quality from a behavioral perspective, identifying critical gaps and test quality issues. Does not check line coverage — checks meaningful scenario coverage. Use after adding or modifying tests.
development
Audits error handling for silent failures, inadequate user feedback, and unjustified fallback behavior. Finds issues in catch blocks, fallbacks, and error paths. Use after modifying error handling code.
development
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.