metamask/code-review
.claude/skills/code-review/SKILL.md
How to review code; a pull request, feature branch, local changes etc.
$ install --global
skillsauthnpx skillsauth add metamask/ocap-kernel code-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 15, 2026, 11:34 AM18.1s1 file scanned
SKILL.md
- name:
- code-review
- description:
- How to review code; a pull request, feature branch, local changes etc.
When asked to review code, whether a PR on GitHub or some local changes, provide feedback on:
- Code quality and best practices
- Potential bugs or issues
- Performance considerations
- Security concerns
- Test coverage
Use the repository's CLAUDE.md for guidance on style and conventions. If you encounter terms that should be added to the glossary, invoke the glossary skill using: Skill tool with skill="glossary" Be constructive and helpful in your feedback.
Related Skills
metamask/discovery
tools
VerifiedTrustedCommunity
Use the discovery tools to find and use services through a service matcher. Do not rely on prior knowledge of services, providers, or APIs.
7SKILL.mdUpdated May 29, 2026
metamask/wallet
tools
VerifiedTrustedCommunity
Use the wallet tools for all balance, send, and sign operations. Supports both ETH and ERC-20 tokens. The away wallet operates autonomously after setup — the home device does not need to be online.
7SKILL.mdUpdated Apr 16, 2026
metamask/update-changelogs
testing
VerifiedTrustedCommunity
Updates changelogs for all packages with consumer-facing changes.
7SKILL.mdUpdated Apr 16, 2026
metamask/push
tools
VerifiedTrustedCommunity
Pushes the current branch to the remote repository.
7SKILL.mdUpdated Apr 16, 2026