robbyt/diff-review
plugins/agy/skills/diff-review/SKILL.md
Get Google Antigravity's (`agy`) code review of git changes after Claude makes edits. Trigger when user wants a second opinion on code changes ("have agy review my changes", "get code review from Google Antigravity", "review this diff with agy"), or as a final check before committing. Replaces the deprecated gemini-cli diff-review workflow.
$ install --global
skillsauthnpx skillsauth add robbyt/claude-skills diff-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 21, 2026, 5:45 AM112.2s1 file scanned
SKILL.md
- name:
- diff-review
- description:
- Get Google Antigravity's (`agy`) code review of git changes after Claude makes edits. Trigger when user wants a second opinion on code changes ("have agy review my changes", "get code review from Google Antigravity", "review this diff with agy"), or as a final check before committing. Replaces the deprecated gemini-cli diff-review workflow.
Diff Review via Google Antigravity (agy)
Have Google's Antigravity CLI review git changes for a second perspective on code
quality. agy runs Google's Gemini models and replaces the deprecated gemini-cli.
Quick Start
Save the diff into the workspace (Google Antigravity can't read paths outside it), have it review, then clean up:
git diff --cached > agy-review.diff
agy --print "Review the code changes in agy-review.diff for issues. Do not make any changes. Respond with feedback only." --dangerously-skip-permissions
rm agy-review.diff
Google Antigravity has no --allowed-tools flag — restrict it via the "Do not make
any changes" clause in the prompt. agy can still read other files in the workspace
when it needs broader context.
Patterns
Staged changes:
git diff --cached > agy-review.diff
agy --print "Review agy-review.diff for:
1. Bugs or logic errors
2. Security vulnerabilities
3. Style inconsistencies
4. Missing error handling
Do not make any changes. Respond with feedback only." --dangerously-skip-permissions
rm agy-review.diff
All uncommitted changes:
git diff HEAD > agy-review.diff
agy --print "Review agy-review.diff. Do not make any changes. Respond with feedback only." --dangerously-skip-permissions
rm agy-review.diff
Specific commit:
git show abc123 > agy-review.diff
agy --print "Review the commit captured in agy-review.diff. Do not make any changes. Respond with feedback only." --dangerously-skip-permissions
rm agy-review.diff
Focused Reviews
Security focus:
git diff --cached > agy-review.diff
agy --print "Security review of agy-review.diff. Check for:
- XSS vulnerabilities
- SQL/command injection
- Sensitive data exposure
- Authentication/authorization issues
Do not make any changes. Respond with feedback only." --dangerously-skip-permissions
rm agy-review.diff
Performance focus:
git diff --cached > agy-review.diff
agy --print "Performance review of agy-review.diff. Check for:
- Inefficient algorithms
- N+1 queries
- Memory leaks
- Blocking operations
Do not make any changes. Respond with feedback only." --dangerously-skip-permissions
rm agy-review.diff
With File Context
Ask agy to read full files for broader context (the prompt-level read-only clause still applies):
git diff --cached > agy-review.diff
agy --print "Review agy-review.diff. Also read the full files:
- src/auth/login.ts
- src/utils/validate.ts
to understand the broader context. Do not make any changes. Respond with feedback only." --dangerously-skip-permissions
rm agy-review.diff
Multi-turn Review
Use --continue to drill into agy's findings:
git diff --cached > agy-review.diff
agy --print "Review agy-review.diff for security issues. Do not make any changes. Respond with feedback only." --dangerously-skip-permissions
agy --continue --print "Of those findings, which are most likely exploitable in production? Do not make any changes. Respond with feedback only." --dangerously-skip-permissions
rm agy-review.diff
Notes
- Google Antigravity must not make any changes; provide feedback ONLY. Without the prompt clause,
agymay attempt edits. agyreads files inside the current workspace only. Saving the diff into the project root (agy-review.diff) makes it accessible.agyrespects.gitignore— it cannot read files matching gitignore patterns.- Requires
dangerouslyDisableSandbox: trueon the Bash tool because Google Antigravity writes session state under~/.gemini/(shared with the old gemini-cli). - May take 1–2 minutes for thorough review; bump
--print-timeoutif needed. - See
references/setup.mdandreferences/patterns.mdfor more.
Related Skills
robbyt/web-search
tools
VerifiedTrustedCommunity
Real-time web research using Google Search via Google's Antigravity (`agy`) CLI — the replacement for the deprecated `gemini-cli`. Trigger when user needs current information ("search with agy", "search with Google Antigravity", "find current info about X with agy", "what's the latest on Y"), library/API research, security vulnerability lookups, or comparisons requiring recent data.
41SKILL.mdUpdated May 21, 2026
robbyt/plan-review
tools
VerifiedTrustedCommunity
Get Google Antigravity's (`agy`) review of Claude's implementation plans. Trigger when user wants a second opinion on a plan ("have agy review this plan", "get a second opinion from Google Antigravity", "critique this plan with agy"), or after Claude creates a plan file that needs validation before implementation. Replaces the deprecated gemini-cli plan-review workflow.
41SKILL.mdUpdated May 21, 2026
robbyt/codebase-analysis
tools
VerifiedTrustedCommunity
Deep architectural analysis of the current workspace using Google Antigravity (`agy`). Trigger when the user needs an architecture overview ("analyze this codebase with agy", "map dependencies with Google Antigravity"), is onboarding to unfamiliar code, exploring legacy systems, or hunting technical debt. Replaces the deprecated gemini-cli `codebase_investigator` workflow.
41SKILL.mdUpdated May 21, 2026
robbyt/plan-review
tools
VerifiedTrustedCommunity
Get Codex's review of Claude's implementation plans via the Codex MCP server. Trigger when user wants a second opinion on a plan ("have Codex review this plan", "get second opinion from Codex", "critique this plan with Codex"), or after Claude creates a plan file that needs validation before implementation.
41SKILL.mdUpdated Apr 19, 2026