helpers/skills/doc-review/SKILL.md
Use this skill to perform adversarial review of AsciiDoc documentation against context sources. Checks factual accuracy, completeness, consistency, and hallucination. Produces workspace/review-findings.json.
npx skillsauth add opendatahub-io/ai-helpers doc-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Perform adversarial comparison of documentation content against context sources to detect inaccuracies, omissions, and hallucinations.
workspace/context-package.json should exist for cross-reference checking$ARGUMENTS contains:
workspace/context-package.json)Resolve the target to a list of .adoc files:
**/*.adocRead workspace/context-package.json and extract:
Group context files by type for targeted comparison:
.go, .py, .java files — authoritative for API behavior*_types.go, *.yaml CRD files — authoritative for field names and schemas.md files from architecture repos — authoritative for design.adoc files — reference for style and terminologyFor each AsciiDoc file, read its content and construct a review prompt combining:
${CLAUDE_SKILL_DIR}/prompts/review-content.md templateAsk the LLM to perform adversarial review:
Merge findings from all reviewed files:
{
"reviewed_at": "2026-04-14T10:50:00Z",
"files_reviewed": 3,
"confidence": 0.78,
"summary": "Documentation is largely accurate but has 2 technical issues...",
"findings": [
{
"category": "technical_inaccuracy",
"severity": "high",
"description": "The documented API field 'replicas' should be 'minReplicas'",
"file_path": "modules/serving/pages/ref_model-serving-params.adoc",
"line_start": 42,
"line_end": 42,
"context_source": "api/v1alpha1/servingruntime_types.go:87",
"suggestion": "Change 'replicas' to 'minReplicas' per the CRD type definition"
}
],
"summary_by_severity": {
"high": 1,
"medium": 2,
"low": 3,
"total": 6
}
}
Write workspace/review-findings.json.
Primary: workspace/review-findings.json
Report to caller: confidence score, total findings by severity, files reviewed.
development
Run hexora static analysis on a Python package repository to detect suspicious code patterns, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.
development
Inspect recent git history of a Python package repository for suspicious commits touching supply-chain-sensitive files, then triage findings with AI reasoning to produce a structured risk report section.
development
Scan a Python package repository for compiled/binary files using Fromager-style detection and malcontent YARA analysis, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.
testing
Use this skill to identify non-Red Hat RPM packages installed in container images or on the local machine. For containers, pulls images across multiple architectures and release tags; for local scans, inspects the host directly. Extracts RPM signing metadata and reports packages not signed with the Red Hat GPG key as CSV output. Use when auditing compliance, checking supply-chain provenance, or scanning for third-party RPMs in RHOAI component images.