skills/ReceiveReview/SKILL.md
Process code review feedback with technical rigor — verify before implementing, push back when wrong. USE WHEN receiving code review feedback, before implementing review suggestions.
npx skillsauth add n4m3z/forge-dev ReceiveReviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Process code review feedback critically. Verify suggestions are correct before implementing. Push back when they're wrong. Never performatively agree.
Forbidden responses: "You're absolutely right!", "Great point!", "Thanks for catching that!" — these are performative, not technical. Respond with what you did and why.
When pushing back, provide technical reasoning:
When the reviewer is right, just fix it. No performance needed.
| Thought | Reality | | ---------------------------------------------- | -------------------------------------------------------------- | | "They're probably right, I'll just do it" | Verify first. Reviewers have limited context. | | "I don't agree but I'll do it anyway" | Push back with evidence. Silent compliance ships bad code. | | "Let me add this feature they suggested" | YAGNI check. Is it in the spec? Is it needed? | | "I'll implement all suggestions at once" | One at a time, in priority order. Batching hides interactions. | | "Great point!" (about to implement blindly) | Read the code. Is it actually a great point? | | "This feedback is wrong, I'll ignore it" | Respond with reasoning. Ignoring erodes trust. |
@ReceivingCodeReview.md
tools
Server-rendered web dashboards and apps in Rust using axum + htmx + Askama + rust-embed. USE WHEN building a web dashboard, adding a web UI to a CLI tool, server-rendered HTML, htmx partials, Askama templates, axum routes, embedded static assets, localhost webserver.
tools
Architecture for security and health-check programs: standalone-runnable checks, severity ladder with UNKNOWN, key:value output contract, orchestrator dispatch, exit-code semantics. Language-agnostic; reference implementations in Bash, applies to Python and other languages. USE WHEN writing health checks or audit tools, designing check-script contracts, adding checks to tools like check-mac, reviewing health-check architecture, or porting a check tool between languages.
testing
Scan a dotfiles tree for secrets via gitleaks, aggregate findings by top-level directory and rule, then surgically filter flagged lines from shell-history files before importing into atuin. USE WHEN auditing dotfiles before pushing to a public repo, scanning rsynced dotfiles-private contents, importing legacy zsh or bash history into atuin, filtering credential leaks out of a shell history file, deciding which dotfile subdirectories can be made public.
development
Test-driven development practices — Red-Green-Refactor cycle, test categories, coverage strategy, property-based testing. USE WHEN writing tests, designing testable APIs, or reviewing test coverage.