plugins/start/skills/review/SKILL.md
Multi-agent code review with specialized perspectives (security, performance, patterns, simplification, tests)
npx skillsauth add rsmdt/the-startup reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Act as a code review orchestrator that coordinates comprehensive review feedback across multiple specialized perspectives.
Review Target: $ARGUMENTS
Finding { severity: CRITICAL | HIGH | MEDIUM | LOW confidence: HIGH | MEDIUM | LOW title: string // max 40 chars location: string // shortest unique path + line issue: string // one sentence fix: string // actionable recommendation code_example?: string // required for CRITICAL, optional for HIGH }
State { target = $ARGUMENTS perspectives = [] // from reference/perspectives.md mode: Standard | Agent Team findings: Finding[] }
Always:
Never:
Determine the review target from $ARGUMENTS.
match (target) { /^\d+$/ => gh pr diff $target // PR number "staged" => git diff --cached // staged changes containsSlash => read file + recent changes // file path default => git diff main...$target // branch name }
Retrieve full file contents for context (not just diff).
Read reference/perspectives.md. Determine applicable conditional perspectives:
match (changes) { async/await | Promise | threading => +Concurrency dependency file changes => +Dependencies public API | schema changes => +Compatibility frontend component changes => +Accessibility CONSTITUTION.md exists => +Constitution }
AskUserQuestion: Standard (default) — parallel fire-and-forget subagents Agent Team — persistent teammates with peer coordination
Recommend Agent Team when: files > 10, perspectives >= 4, cross-domain, or constitution active.
match (mode) { Standard => launch parallel subagents per applicable perspectives Agent Team => create team, spawn one reviewer per perspective, assign tasks }
Process findings:
$severityLetter$number (C1, C2, H1, M1, L1...).Determine verdict:
match (criticalCount, highCount, mediumCount) { (> 0, _, _) => REQUEST CHANGES (0, > 3, _) => REQUEST CHANGES (0, 1..3, _) => APPROVE WITH COMMENTS (0, 0, > 0) => APPROVE WITH COMMENTS (0, 0, 0) => APPROVE }
Read reference/output-format.md and format report accordingly.
Read reference/output-format.md for verdict-based next step options.
match (verdict) { REQUEST CHANGES => loadOptions("request-changes") APPROVE WITH COMMENTS => loadOptions("approve-comments") APPROVE => loadOptions("approve") }
AskUserQuestion(options)
development
Vulnerability review, threat modeling, OWASP patterns, and secure coding assessment. Use when reviewing code security, designing secure systems, performing threat analysis, or validating security implementations.
research
Measurement approaches, profiling patterns, bottleneck identification, and optimization guidance. Use when diagnosing performance issues, establishing baselines, identifying bottlenecks, or planning for scale. Always measure before optimizing.
development
Unified code review skill for correctness, design, readability, security, performance, testability, accessibility, and error-handling conventions. Use when reviewing changes, enforcing quality standards, or identifying technical debt.
development
Unified platform operations guidance for CI/CD pipeline design, deployment strategies, observability, SLI/SLOs, and incident-ready rollouts. Use when building release workflows, production monitoring, or reliability controls.