raisedadead/adhoc-review
plugins/dp-cto/skills/adhoc-review/SKILL.md
Use when you want a code review on recent changes, a specific file, or a pull request — 'review this', 'check my code', 'what did I miss'. Works in any project without setup.
$ install --global
skillsauthnpx skillsauth add raisedadead/dotplugins adhoc-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 26, 2026, 10:33 AM34.0s1 file scanned
SKILL.md
- name:
- adhoc-review
- description:
- Use when you want a code review on recent changes, a specific file, or a pull request — 'review this', 'check my code', 'what did I miss'. Works in any project without setup.
- user-invocable:
- true
- context:
- fork
- agent:
- dp-cto:reviewer
Ad-Hoc Code Review
Standalone code review task. No tracker state, no task_id, no stage context. Works in any project.
Your Task
Review the scope passed as arguments. If no scope provided, determine it:
- If args specify files, directories, or git range → use that
- Else if
git diff --name-only HEAD~1has changes → review that diff - Else → ask the user: "What should I review? Provide file paths, a git range, or 'all'."
Lens Selection
If args include a lens keyword (security, simplification, test-gaps, linting, performance, docs, sweep, pushback), apply that lens. Otherwise default to Quick — pick the single most-relevant lens for the diff.
| Lens | Focus | | -------------- | ------------------------------------------------- | | security | injection, authz, secrets, SSRF, OWASP top 10 | | simplification | dead code, over-engineering, needless abstraction | | test-gaps | missing coverage, untested branches | | linting | style, naming, dead imports | | performance | N+1, hot loops, allocation | | docs | stale comments, missing context | | sweep | entropy drift across conventions | | pushback | adversarial challenge of proposals |
Output Format
Present findings grouped by severity:
- CRITICAL — must fix before ship
- WARNING — should fix
- SUGGESTION — optional
Every finding includes file:line + evidence + suggested fix. Deduplicate by file:line (keep higher severity).
Related Skills
raisedadead/self-develop
development
VerifiedTrustedCommunity
Use when the user shares a URL, names a resource from SOURCES.md, shares operational feedback, says 'adopt', 'learn from', 'what can we steal from', 'compare with', 'self-develop', or 'how do we get better'.
4SKILL.mdUpdated Apr 18, 2026
raisedadead/setup
tools
VerifiedTrustedCommunity
Use when you need to set up or rebuild the dp-lsp Docker image after installing the plugin — 'set up LSP', 'build the image', 'install language servers'.
4SKILL.mdUpdated Apr 18, 2026
raisedadead/tdd
development
VerifiedTrustedCommunity
Use when you want to write tests first, enforce test-driven development, or add test coverage — 'write tests for this', 'TDD this feature', 'add test coverage'. Strict RED-GREEN-REFACTOR discipline.
4SKILL.mdUpdated Apr 18, 2026
raisedadead/spec
testing
VerifiedTrustedCommunity
Use when starting major work that needs formal design review — cross-team changes, architectural decisions, or complex features where requirements need discovery before implementation.
4SKILL.mdUpdated Apr 18, 2026