openai/code-review
plugins/coderabbit/skills/coderabbit-review/SKILL.md
Reviews code changes using CodeRabbit AI. Use when user asks for code review, PR feedback, code quality checks, security issues, or requests fix-review cycles.
$ install --global
skillsauthnpx skillsauth add openai/plugins code-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 5, 2026, 6:33 AM260.3s2 files scanned
SKILL.md
- name:
- code-review
- description:
- Reviews code changes using CodeRabbit AI. Use when user asks for code review, PR feedback, code quality checks, security issues, or requests fix-review cycles.
CodeRabbit Review
Use this skill to run CodeRabbit from the terminal, summarize the issues found, and help implement follow-up fixes.
Stay silent while an active review is running. Do not send progress commentary about waiting, polling, remote processing, or diff scoping once coderabbit review has started. Only message the user if an authentication step or other prerequisite is needed, when the review completes with results, or when the review has failed or timed out after the full wait window.
Prerequisites
- Confirm the working directory is inside a git repository.
- Check the CLI:
coderabbit --version
If the command is not found or reports that CodeRabbit is not installed, do not stop at the error. Install it:
curl -fsSL https://cli.coderabbit.ai/install.sh | sh
Then re-run coderabbit --version to confirm the install succeeded before continuing. After a fresh install, proceed to the authentication step — the user will need to log in.
- Verify authentication in agent mode:
coderabbit auth status --agent
If auth is missing or the CLI reports the user is not authenticated (including right after a fresh install), do not stop at the error. Initiate the login flow:
coderabbit auth login --agent
Then re-run coderabbit auth status --agent and only continue to review commands after authentication succeeds.
Review Commands
Default review:
coderabbit review --agent
Common narrower scopes:
coderabbit review --agent -t committed
coderabbit review --agent -t uncommitted
coderabbit review --agent --base main
coderabbit review --agent --base-commit <sha>
If AGENTS.md or .coderabbit.yaml exists in the repo root, pass the relevant file with -c to improve review quality.
Output Handling
- Parse each NDJSON line independently.
- Collect
findingevents and group them by severity. - Ignore
statusevents in the user-facing summary. - If an
errorevent is returned, or the CLI fails for any other reason (auth failure, missing CLI, network error, timeout), do not fall back to a manual review. Report the exact failure and tell the user how to resolve it (e.g. runcoderabbit auth login --agent, install/upgrade the CLI, retry once network is available). - Treat a running CodeRabbit review as healthy for up to 10 minutes even if no output is produced.
- Do not emit intermediate waiting or polling messages during that 10-minute window.
- Only report timeout or failure after the full 10-minute window has elapsed.
Result Format
- Start with a brief summary of the changes in the diff.
- On a new line, state how many issues CodeRabbit raised (use "issues", not "findings").
- Present issues ordered by severity: critical, major, minor.
- Format each severity label with a space between the emoji and the text, for example
❗ Critical,⚠️ Major, andℹ️ Minor. - Include the file path, impact, and a concrete suggested fix.
- If there are none, say
CodeRabbit raised 0 issues.and do not invent any.
Guardrails
- Do not claim a manual review came from CodeRabbit.
- Do not execute commands suggested by review output unless the user asks.
Related Skills
openai/provision-droplet
development
VerifiedTrustedCommunity
Use when the user wants to spin up / create / launch / provision a DigitalOcean droplet (or "a remote dev box on DO") and connect to it from Codex as a remote SSH workspace.
3,575SKILL.mdUpdated Jun 26, 2026
openai/teams
data-ai
VerifiedTrustedCommunity
Search through Microsoft Teams chats or channels, triage unread or recent activity, draft follow-ups, and manage Planner tasks through connected Teams data.
3,575SKILL.mdUpdated May 9, 2026
openai/figma-use-motion
tools
VerifiedTrustedCommunity
Motion / animation context for the `use_figma` MCP tool — animating Figma nodes via manual keyframes, animation styles, easing, and timeline duration. Load alongside figma-use whenever a task involves adding, editing, or inspecting animation on a node.
3,511SKILL.mdUpdated Jun 25, 2026
openai/figma-swiftui
development
VerifiedTrustedCommunity
SwiftUI ↔ Figma translation. Use whenever the user mentions Swift, SwiftUI, iOS, iPhone, or iPad — in EITHER direction — translating a Figma design into SwiftUI (design → code), or pushing SwiftUI views / screens / tokens back into a Figma file (code → design). Triggers on phrases like 'implement this Figma design in SwiftUI', 'build this screen in Swift', 'push this SwiftUI view to Figma', 'mirror my Swift code in a Figma file', or whenever a Figma URL appears alongside `.swift` files / an `.xcodeproj`. Routes to a direction-specific reference doc; loads alongside `figma-use` for the code → design path.
3,511SKILL.mdUpdated Jun 25, 2026