paulund/review
review/SKILL.md
Run a comprehensive code review on the current PR or codebase. Use when a PR is ready for review, after implementation, or when the user asks for a review. Trigger phrases - "/review", "review this".
$ install --global
skillsauthnpx skillsauth add paulund/ai reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 4, 2026, 5:37 AM202.7s1 file scanned
SKILL.md
- name:
- review
- description:
- Run a comprehensive code review on the current PR or codebase. Use when a PR is ready for review, after implementation, or when the user asks for a review. Trigger phrases - "/review", "review this".
- category:
- workflow
Core Workflow
- Fetch the PR diff — use
gh pr diffor read the changed files - Check against standards — verify the code follows project conventions (loaded via context skills like
dev-laravel,dev-php, etc.) - Identify issues — bugs, performance problems, security risks, maintainability issues, missing tests
- Provide actionable feedback — specific line comments and a summary review
- Suggest fixes — where appropriate, propose code changes
Review Checklist
- [ ] Correctness — does the code do what it claims?
- [ ] Tests — are there tests? Do they cover edge cases?
- [ ] Performance — any N+1 queries, unnecessary re-renders, or heavy operations?
- [ ] Security — input validation, auth checks, data exposure
- [ ] Maintainability — naming, complexity, duplication
- [ ] Consistency — follows project conventions and existing patterns
Output Format
Provide feedback as:
- Summary — high-level themes (1-3 sentences)
- Critical issues — must fix before merge
- Suggestions — improvements that are optional but recommended
- Praise — what was done well (keep this brief)
Related Skills
paulund/quality-gate
development
VerifiedTrustedCommunity
Use when the user wants to run the project's lint + types + build sequence as a gate before pushing, opening a PR, or merging. Invoked by chained dev skills between phases. Trigger phrases - "/quality-gate", "run the quality gate", "check it builds".
2SKILL.mdUpdated May 10, 2026
paulund/pr-verify
tools
VerifiedTrustedCommunity
Use when the user wants to verify a PR's feature works at runtime by booting the dev server, exercising the affected UI via Chrome DevTools MCP, and posting a screenshot summary back to the PR. Idempotent — skips if `verified` or `verify-failed` is already on the PR. Trigger phrases - "/pr-verify", "verify this PR", "runtime check the pr".
2SKILL.mdUpdated May 10, 2026
paulund/pr-security-review
testing
VerifiedTrustedCommunity
Use when the user wants a security-focused review pass on a PR with findings actioned as commits on the same branch. Trigger phrases - "/pr-security-review", "security review and fix".
2SKILL.mdUpdated May 10, 2026
paulund/pr-open
testing
VerifiedTrustedCommunity
Use when the user wants to open a pull request for an already-pushed branch that implements a specific issue. Idempotent — returns the existing PR if one is already open for the branch. Trigger phrases - "/pr-open", "open the pr", "create pr for this branch".
2SKILL.mdUpdated May 10, 2026