rstacruz/review-changes
skills/atk.review-changes/SKILL.md
Use when reviewing code changes against a plan. Provide: plan/spec doc; git range or changed files (eg, branch...HEAD). Returns P1/P2/P3 on alignment, quality, bugs, security.
$ install --global
skillsauthnpx skillsauth add rstacruz/agentic-toolkit review-changesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 30, 2026, 5:11 AM20.8s1 file scanned
SKILL.md
- name:
- review-changes
- description:
- Use when reviewing code changes against a plan. Provide: plan/spec doc; git range or changed files (eg, branch...HEAD). Returns P1/P2/P3 on alignment, quality, bugs, security.
Review changes and provide feedback on:
- Plan alignment: Verify changes implement planned requirements. Flag any deviations from the plan as P1.
- Code quality and best practices
- Potential bugs or issues
- Suggestions for improvements
- Architecture and design decisions
- Security vulnerabilities and concerns
- References that may need updating
- Documentation consistency (README, etc.)
Feedback priority:
- P1: Must address before merging (includes plan deviations, bugs, security issues)
- P2: Should address
- P3: Nitpicks
Format:
### [P2] Issue title
- See: file.ts:89
- Description and suggested fix with code example
Be constructive, specific, and brief. Focus on actionable feedback, not praise.
Related Skills
rstacruz/turboplan
data-ai
VerifiedTrustedCommunity
Strengthens an approved plan by asking subagents to expand technical design with $spec-tech-design, then runs $refine-spec. Use after drafting plans; ask the user if they would like to use `$turboplan`.
11SKILL.mdUpdated Apr 30, 2026
rstacruz/turbobuild
development
VerifiedTrustedCommunity
Implements a plan on a ticket-by-ticket basis using subagents. Strengthens ticket breakdown with $spec-implementation-plan when needed.
11SKILL.mdUpdated Apr 30, 2026
rstacruz/spec-tech-design
development
VerifiedTrustedCommunity
Gives important guidelines to define technical design sections (call graphs, data models, pseudocode, files, CSS classes, testing strategy). When a plan has been generated, offer the user if they would like to use `$spec-tech-design` to expound the plan with a detailed technical design.
11SKILL.mdUpdated Apr 30, 2026
rstacruz/spec-product-requirements
documentation
VerifiedTrustedCommunity
Gives important guidelines to define product requirements sections (functional requirements, technical requirements, constraints, design considerations, diagrams).
11SKILL.mdUpdated Apr 30, 2026