gmickel/flow-impl-review
plugins/flow/skills/flow-impl-review/SKILL.md
John Carmack-level implementation review via rp-cli for current branch changes. Use when reviewing code changes, PRs, or implementations. Triggers on mentions of code review, implementation review, or PR review.
$ install --global
skillsauthnpx skillsauth add gmickel/gmickel-claude-marketplace flow-impl-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 7:52 AM4.1s1 file scanned
SKILL.md
- name:
- flow-impl-review
- description:
- John Carmack-level implementation review via rp-cli for current branch changes. Use when reviewing code changes, PRs, or implementations. Triggers on mentions of code review, implementation review, or PR review.
Implementation Review Mode (CLI)
Conduct a John Carmack-level review of implementation changes on the current branch using RepoPrompt's context builder and chat.
Role: Code Review Coordinator (NOT the reviewer) Tool: rp-cli for context building and chat delegation
Input
Arguments: #$ARGUMENTS
Format: [additional context, focus areas, or special instructions]
Example: /flow:impl-review focus on the auth changes, ignore styling
Reviews all changes on the current branch vs main/master.
FIRST: Determine Review Mode
Check: which rp-cli >/dev/null 2>&1
If NOT available: inform user rp-cli is required for this skill.
If review mode was already chosen earlier in this conversation (e.g., user answered "2a" or "2b" during /flow:plan or /flow:work setup):
→ Use that mode, don't ask again.
If invoked directly without prior context, ask:
Both modes use RepoPrompt for context building (builder, file selection, codemaps).
The difference is where the review happens:
Review mode:
a) RepoPrompt chat (default) — review via rp-cli chat
b) Export for external LLM — export context file for ChatGPT, Claude web, etc.
(Reply: "a", "b", "export", or just tell me)
Wait for response. Parse naturally.
Context Sources
The workflow gathers context from:
- Git diff and commit messages
- Plan files referenced in commits
- PRD/architecture docs
- Beads: If you know which issue(s) this work relates to, include via
bd show
Critical Requirement
DO NOT REVIEW CODE YOURSELF – you are a coordinator, not the reviewer.
Your job is to:
- Use
rp-cli -e 'windows'to find the RepoPrompt window - Use
rp-cli -w <id> -e 'builder ...'to build context - Use
rp-cli -w <id> -e 'chat ...'to execute the review
The RepoPrompt chat conducts the actual review with full file context.
Workflow
Read workflow.md and follow each phase in order. Phases include change identification, context building, and review execution.
rp-cli Reference
Read rp-cli-reference.md for command syntax and examples.
Related Skills
gmickel/flow-next-drive
development
VerifiedTrustedCommunity
Drive any UI surface like a real user - a web app, a Chromium-backed desktop app (Electron / WebView2, reached over CDP), or a genuinely native app (macOS AppKit/SwiftUI, or a non-CDP webview) reached via Computer Use. Detects the surface, picks the best available driver, degrades gracefully. Use to navigate sites, verify deployed UI, test web or desktop apps, capture baseline screenshots, drive a sign-in flow, scrape data, fill forms, run an e2e check, or inspect current page state. Triggers on "check the page", "verify UI", "test the site", "test this app", "drive the app", "automate this desktop app", "read docs at", "look up API", "visit URL", "browse", "screenshot", "scrape", "e2e test", "login flow", "capture baseline", "see how it looks", "inspect current", "before redesign", "Electron app", "native app".
621SKILL.mdUpdated Jun 4, 2026
gmickel/flow-next-drive
development
VerifiedTrustedCommunity
Drive any UI surface like a real user - a web app, a Chromium-backed desktop app (Electron / WebView2, reached over CDP), or a genuinely native app (macOS AppKit/SwiftUI, or a non-CDP webview) reached via Computer Use. Detects the surface, picks the best available driver, degrades gracefully. Use to navigate sites, verify deployed UI, test web or desktop apps, capture baseline screenshots, drive a sign-in flow, scrape data, fill forms, run an e2e check, or inspect current page state. Triggers on "check the page", "verify UI", "test the site", "test this app", "drive the app", "automate this desktop app", "read docs at", "look up API", "visit URL", "browse", "screenshot", "scrape", "e2e test", "login flow", "capture baseline", "see how it looks", "inspect current", "before redesign", "Electron app", "native app".
621SKILL.mdUpdated Jun 4, 2026
gmickel/flow-next-make-pr
data-ai
VerifiedTrustedCommunity
Render a cognitive-aid PR body from flow-next state and open via gh. Triggers on /flow-next:make-pr with optional spec id and flags (--draft, --ready, --no-mermaid, --base <ref>, --memory, --dry-run). Auto-detects spec from current branch when no id given. NOT Ralph-blocked — autonomous loops can surface a draft PR for human review.
621SKILL.mdUpdated May 8, 2026
gmickel/flow-next-make-pr
data-ai
VerifiedTrustedCommunity
Render a cognitive-aid PR body from flow-next state and open via gh. Triggers on /flow-next:make-pr with optional spec id and flags (--draft, --ready, --no-mermaid, --base <ref>, --memory, --dry-run). Auto-detects spec from current branch when no id given. NOT Ralph-blocked — autonomous loops can surface a draft PR for human review.
621SKILL.mdUpdated May 8, 2026