shouenlee/review
plugins/code-review/skills/review/SKILL.md
Review code for bugs, security issues, performance problems, and readability improvements. Use when you need a code review on a file or directory.
development
Updated Apr 14, 2026
$ install --global
skillsauthnpx skillsauth add shouenlee/ghcp-dev-plugin reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 14, 2026, 2:25 AM50.1s1 file scanned
SKILL.md
- name:
- review
- description:
- Review code for bugs, security issues, performance problems, and readability improvements. Use when you need a code review on a file or directory.
/review - Code Review
Review code for bugs, security issues, performance problems, and readability improvements.
Usage
/review [file or directory]
Instructions
When the user invokes /review, perform a thorough code review of the specified file, directory, or the most recently edited files if no target is given.
Review Categories
Analyze the code across these dimensions and report findings grouped by category:
- Bugs - Logic errors, off-by-one errors, null/undefined access, race conditions, unhandled edge cases
- Security - Injection vulnerabilities (SQL, XSS, command), hardcoded secrets, insecure defaults, missing input validation
- Performance - Unnecessary allocations, N+1 queries, missing indexes, blocking operations, inefficient algorithms
- Readability - Unclear naming, overly complex functions, missing or misleading comments, inconsistent style
Output Format
For each finding, report:
- File and line number (e.g.,
src/auth.ts:42) - Severity: Critical, Warning, or Info
- Category: Bug, Security, Performance, or Readability
- Description: What the issue is and why it matters
- Suggestion: How to fix it, with a code snippet when helpful
Behavior
- If no file or directory is specified, review files changed in the current git working tree (
git diff --name-onlyandgit diff --cached --name-only). - Skip binary files, lock files, and generated files.
- Prioritize findings by severity (Critical first).
- At the end, provide a brief summary with counts by category and severity.
Related Skills
shouenlee/task_breakdown
tools
VerifiedTrustedCommunity
Decomposes feature descriptions or GitHub issues into ordered subtasks with file-level scope, acceptance criteria, and optional gh issue create. Use when asked to "break down task", "decompose feature", "create subtasks", "plan implementation", "break this into tasks", "task list", or "implementation plan".
SKILL.mdUpdated Apr 14, 2026
shouenlee/release_notes
documentation
VerifiedTrustedCommunity
Generates changelogs from conventional commits, bumps semantic versions in pyproject.toml or package.json, and publishes GitHub releases. Use when asked to "create release", "release notes", "changelog", "bump version", "semantic version", "tag release", "publish release", or "what changed since last release".
SKILL.mdUpdated Apr 14, 2026
shouenlee/python_lint_fix
development
VerifiedTrustedCommunity
Runs ruff, mypy, and bandit on changed Python files — explains violations and auto-fixes with ruff check --fix. Use when asked to "lint", "fix lint", "check types", "type check", "run mypy", "run ruff", "python quality", or "lint python files".
SKILL.mdUpdated Apr 14, 2026
shouenlee/make_skill_template
development
VerifiedTrustedCommunity
Create new Agent Skills for GitHub Copilot from prompts or by duplicating this template. Use when asked to "create a skill", "make a new skill", "scaffold a skill", or when building specialized AI capabilities with bundled resources. Generates SKILL.md files with proper frontmatter, directory structure, and optional scripts/references/assets folders.
SKILL.mdUpdated Apr 14, 2026