skills/code-review/SKILL.md
Code review of current branch changes. Use when the developer wants to review their code before pushing or creating a PR/MR.
npx skillsauth add intpp/agent-skills code-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Review the code changes on the current branch compared to the target branch.
Target branch: $ARGUMENTS
If the argument above is empty, use main as the target branch. Otherwise use the provided value as the target branch name.
First, fetch the latest remote state:
git fetch origin
Then get the list of changed files with their statuses:
git diff --name-status origin/<target_branch>...HEAD
If this fails (branch doesn't exist on remote), try:
git diff --name-status <target_branch>...HEAD
If that also fails, fall back to reviewing the last commit:
git diff --name-status HEAD~1
The output shows statuses: A (added), M (modified), D (deleted), R (renamed).
Skip deleted (D) files — there's nothing to review in removed code.
Skip files that don't need code review — see REVIEW_GUIDELINES.md for the default exclude list.
If .review-agent.md has a "Files to skip" section, apply those patterns in addition to the defaults.
If .review-agent.md exists in the repo root, read it — it contains review-specific conventions and rules that apply ONLY during code review (e.g., what to ignore, project-specific patterns to accept, review strictness). This is separate from CLAUDE.md which is for general development context. Respect these conventions and do NOT suggest changes that contradict them.
This is the critical step for performance. You MUST use the Agent tool to review files in parallel.
Group the filtered files into batches and launch sub-agents concurrently. Each sub-agent reviews its batch independently.
For each sub-agent, read REVIEW_GUIDELINES.md and include its content in the prompt along with:
You are a senior code reviewer. Review the following files for a branch targeting <target_branch>.
<review-specific context from .review-agent.md if found>
<REVIEW_GUIDELINES.md content>
Files to review:
<list of files in this batch with their statuses (A/M/R)>
For each file:
1. Run: git diff origin/<target_branch>...HEAD -- <file_path>
to see what changed.
2. Read the file (or relevant sections) for surrounding context.
3. For new files (A): review entire content.
4. For modified files (M): focus on changed lines, consider context.
5. For renamed files (R): review code changes if any.
For EACH file, output in this format:
**<file_path>**
**[error/warning/info] Line X(-Y): Brief title** (category)
Description with concrete scenario. Fix suggestion with code.
---
If a file has no issues, output:
**<file_path>** — no issues found.
Categories: bug, security, performance, error-handling, type-safety, typo, naming, unused-code, code-style, best-practice, documentation, maintainability, other
IMPORTANT: Launch ALL sub-agents in a single message using multiple Agent tool calls. Do NOT wait for one to finish before launching the next.
After all sub-agents complete, collect their findings and output the consolidated review.
Output all file reviews (from sub-agents), then add a summary:
Summary
Risk scoring (1-10):
Quality scoring (1-10):
If no issues found: "No issues found in N files reviewed. The changes look good."
If any sub-agent found a CRITICAL issue (security, major bug) in code OUTSIDE changed lines but RELATED to the changes — list separately at the end under "Out-of-scope issues".
development
Maintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.
development
Maintainer workflow for OpenClaw releases, prereleases, changelog release notes, and publish validation. Use when Codex needs to prepare or verify stable or beta release steps, align version naming, assemble release notes, check release auth requirements, or validate publish-time commands and artifacts.
development
Run, watch, debug, and extend OpenClaw QA testing with qa-lab and qa-channel. Use when Codex needs to execute the repo-backed QA suite, inspect live QA artifacts, debug failing scenarios, add new QA scenarios, or explain the OpenClaw QA workflow. Prefer the live OpenAI lane with regular openai/gpt-5.4 in fast mode; do not use gpt-5.4-pro or gpt-5.4-mini unless the user explicitly overrides that policy.
development
End-to-end Parallels smoke, upgrade, and rerun workflow for OpenClaw across macOS, Windows, and Linux guests. Use when Codex needs to run, rerun, debug, or interpret VM-based install, onboarding, gateway smoke tests, latest-release-to-main upgrade checks, fresh snapshot retests, or optional Discord roundtrip verification under Parallels.