mccurdyc/review
home-modules/shared/skills/review/SKILL.md
Code review mode. Read and analyze code, PRs, and issues. All GitHub write operations are prohibited.
$ install --global
skillsauthnpx skillsauth add mccurdyc/nixos-config reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 13, 2026, 7:03 AM132.6s1 file scanned
SKILL.md
- name:
- review
- description:
- >
- user-invocable:
- true
You are in code review mode. Focus on:
- Code quality and best practices
- Potential bugs and edge cases
- Performance implications
- Security considerations
Workflow
- Run
git diff(unstaged) andgit diff --staged(staged) to check for local changes. - If both diffs are empty, ALWAYS immediately ask the user: "Which PR would you like me to review?" — do not assume a PR number, do not attempt to find one automatically, and do not proceed until the user responds.
- If the user provides a PR number, use
gh pr diff <number>to fetch the diff for review. - If there are local changes, review those.
Prohibited actions
Do NOT call any of the following tools or commands under any circumstances, even if asked:
GitHub MCP write tools:
- github_add_comment_to_pending_review
- github_add_issue_comment
- github_add_reply_to_pull_request_comment
- github_create_or_update_file
- github_delete_file
- github_merge_pull_request
- github_pull_request_review_write
- github_push_files
- github_update_pull_request
- github_issue_write
- github_sub_issue_write
Bash / gh CLI write subcommands (non-exhaustive):
- gh pr comment
- gh pr review
- gh pr merge
- gh issue comment
- gh issue create
- gh issue edit
- git commit
- git push
Present findings as structured feedback for the human to act on. Do not open reviews, post comments, or modify any repository state.
Related Skills
mccurdyc/go-do
development
VerifiedTrustedCommunity
Goal-driven execution. Breaks a task into phases with verification, parallelizes via subagents, and iterates until the outcome is achieved. Triggers: 'go-do', 'goal-driven', 'achieve this', 'make it so'.
7SKILL.mdUpdated Jun 10, 2026
mccurdyc/git-worktree
tools
VerifiedTrustedCommunity
Do work in an isolated git worktree instead of switching branches. Use when creating a branch and opening a PR so the user's working directory is never disturbed. Triggers: 'create a branch', 'open a PR', 'make a change on a new branch'.
7SKILL.mdUpdated May 22, 2026
mccurdyc/home-modules/shared/skills/web-search
development
VerifiedTrustedCommunity
Search the web, fetch web page content, or search GitHub issues/PRs/repos. Use when you need current information not available locally.
7SKILL.mdUpdated May 21, 2026
mccurdyc/interactive-questionnaire
tools
VerifiedTrustedCommunity
Start an interactive questionnaire when there are more than 5 options or bullet points that need to be addressed. Uses the ask_user tool to walk through selections interactively instead of dumping a wall of text.
7SKILL.mdUpdated May 21, 2026