.claude/skills/review/SKILL.md
Run parallel code reviews using specialized agents (security, performance, simplicity, nextjs-react). Produces a structured report.
npx skillsauth add lucidlabs-hq/agent-kit reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Run specialized review agents in parallel against the codebase. Collect findings into a single structured report.
Parse the argument to determine what to review:
| Argument | Scope |
|----------|-------|
| /review or /review full | Run ALL 4 reviewers on frontend/ and convex/ |
| /review security | Run security-reviewer only |
| /review performance | Run performance-reviewer only |
| /review simplicity | Run simplicity-reviewer only |
| /review nextjs | Run nextjs-react-reviewer only |
| /review <path> | Run ALL 4 reviewers scoped to the given path |
Use the Task tool to launch specialized agents in parallel. Each agent corresponds to a file in .claude/agents/:
Agent Mapping:
| Review Type | Agent File | Focus |
|-------------|-----------|-------|
| Security | .claude/agents/security-reviewer.md | OWASP, auth, XSS, CSRF, secrets |
| Performance | .claude/agents/performance-reviewer.md | Re-renders, bundle, N+1, O(n^2) |
| Simplicity | .claude/agents/simplicity-reviewer.md | YAGNI, dead code, over-abstraction |
| Next.js/React | .claude/agents/nextjs-react-reviewer.md | Server/Client, hooks, TypeScript, naming |
Launch Pattern:
For each selected reviewer, launch a Task with subagent_type: code-reviewer:
Task: "Run {type} review on {scope}"
Prompt: Read .claude/agents/{agent-file}.md for instructions.
Review {scope} and produce findings per the agent's output format.
Include exact file paths and line numbers.
CRITICAL: Launch ALL selected reviewers in a SINGLE message (parallel tool calls). Do NOT run them sequentially.
Wait for all agents to complete. Read each agent's output.
Create a unified report at:
.agents/reviews/YYYY-MM-DD-{topic}.md
Report Template:
# Code Review: {Topic}
**Date:** YYYY-MM-DD
**Branch:** `{current branch}`
**Scope:** {what was reviewed}
**Reviewers:** {which agents ran}
---
## Executive Summary
{2-3 sentence overview of findings}
| Category | P1 (Must Fix) | P2 (Should Fix) | P3 (Consider) |
|----------|--------------|-----------------|----------------|
| Security | N | N | N |
| Performance | N | N | N |
| Simplicity | N | N | N |
| Next.js/React | N | N | N |
| **Total** | **N** | **N** | **N** |
---
## P1 -- Must Fix
{Findings from all reviewers, merged and deduplicated}
## P2 -- Should Fix
{Findings from all reviewers, merged and deduplicated}
## P3 -- Consider
{Findings from all reviewers, merged and deduplicated}
---
## Positive Findings
{What the codebase does well}
---
## Action Plan
### Immediate (This Session)
- [ ] ...
### Next Sprint
- [ ] ...
### Backlog
- [ ] ...
After writing the report, show a compact summary to the user:
REVIEW COMPLETE
----------------------------------------------------------------------
Report: .agents/reviews/YYYY-MM-DD-{topic}.md
Findings: P1: N | P2: N | P3: N
Reviewers: security, performance, simplicity, nextjs-react
Scope: {scope}
Top Issues:
1. {P1 finding summary}
2. {P1 finding summary}
3. {P2 finding summary}
Fix now? (y/n)
----------------------------------------------------------------------
If the user confirms, start fixing P1 issues:
npx tsc --noEmit to verify/review
Runs all 4 agents on entire codebase.
/review security
Runs only the security-reviewer.
/review frontend/app/api/
Runs all 4 agents scoped to API routes.
/review before /pre-production for comprehensive quality check/review security after adding new API routes/review performance after large feature implementations.agents/reviews/ for historical trackingdevelopment
Deploy invoice-accounting-assistant to HQ server. Runs tests first (TDD), then builds and deploys. Use when ready to push changes to staging/production.
testing
Visual UI verification with agent-browser. Use after implementing UI components to take screenshots, verify interactions, and self-check your work. FASTER than E2E tests.
documentation
Update README with current project status and features. Use after completing features.
tools
--- name: time-report description: Cross-project time report. Aggregates all session data from ~/.claude-time/sessions/. Use to see how much time was spent across all projects. disable-model-invocation: true allowed-tools: Bash, Read argument-hint: [all | this-week | this-month | last-month | {project-name}] --- # Time Report: Cross-Project Session Overview ## Objective Read ALL session files from `~/.claude-time/sessions/*.json` and produce an aggregated time report. Supports filtering by pe