codereview
NewClaude Skills for Code Review
Overview
Agent Skills for Code Review.
These skills follow the Agent Skills specification so they can be used by any skills-compatible agent, including Claude Code and Codex CLI.
Quick Start
Review a GitHub PR with a single command:
Review PR 123
Review PR owner/repo#123
Review PR https://github.com/owner/repo/pull/123This will automatically:
- Fetch the PR diff from GitHub
- Triage and assess risk
- Run appropriate specialist reviews
- Post the review to GitHub
Overview
This plugin provides a comprehensive code review system modeled after industry-leading tools like CodeRabbit, Cursor BugBot, and Greptile. It uses an Input → Orchestrator → Specialists → Output pipeline architecture:
┌─────────────────────────────────────────────────────────────┐
│ INPUT SKILLS │
│ retrieve-diff-from-github-pr │ retrieve-diff-from-commit │
└────────────────────────────────┬────────────────────────────┘
│
▼
┌─────────────────────────────────────────────────────────────┐
│ codereview-orchestrator │
│ (Triage & Route - nothing else) │
└──────────────────────────┬──────────────────────────────────┘
│
┌───────┬───────┬─────┴─────┬───────┬───────┬───────┐
▼ ▼ ▼ ▼ ▼ ▼ ▼
┌─────────┐ ┌─────┐ ┌─────┐ ┌─────────┐ ┌─────┐ ┌─────┐ ┌─────┐
│security │ │ api │ │data │ │concurr. │ │perf │ │test │ │style│
└─────────┘ └─────┘ └─────┘ └─────────┘ └─────┘ └─────┘ └─────┘
│
▼
┌─────────────────────────────────────────────────────────────┐
│ OUTPUT SKILLS │
│ submit-github-review │
└─────────────────────────────────────────────────────────────┘Installation
Marketplace
/plugin marketplace add xinbenlv/codereview-skills
/plugin install codereview@codereview-skillsManually
Add the contents of this repo to a /.claude folder in your project root (or whichever folder you're using with Claude Code). See more in the official Claude Skills documentation.
Copy the skills/ directory into your Codex skills path (typically ~/.codex/skills). See the Agent Skills specification for the standard skill format.
Skills
📥 Input Skills
| Skill | Description | Use When |
|---|---|---|
| retrieve-diff-from-github-pr | Fetch PR diff and metadata via GitHub API | Reviewing GitHub PRs |
| retrieve-diff-from-commit | Get diff from local git commits | Reviewing local changes |
🎯 Orchestrator
| Skill | Description | Use When |
|---|---|---|
| codereview-orchestrator | Triage, assess risk, route to specialists. Coordinates full pipeline. | Entry point for all reviews |
🔍 Specialists
| Skill | Modeled After | Focus Area | Trigger |
|---|---|---|---|
| codereview-security | Cursor BugBot | Vulnerabilities, auth, injection, secrets | Auth, input, API calls |
| codereview-correctness | - | Logic bugs, error handling, edge cases | Core business logic |
| codereview-api | - | Contracts, breaking changes, versioning | Routes, endpoints, schemas |
| codereview-data | - | Migrations, queries, transactions | Database, models |
| codereview-concurrency | - | Retries, idempotency, distributed systems | Async, workers, queues |
| codereview-performance | - | O(n²), N+1, memory leaks, caching | Loops, queries, I/O |
| codereview-observability | - | Logging, metrics, tracing, alerting | Monitoring code |
| codereview-testing | - | Coverage, quality, determinism | Test files |
| codereview-style | - | Readability, maintainability, docs | All files (final pass) |
| codereview-config | - | Secrets, feature flags, environment | Config, env files |
| codereview-architect | Greptile | Blast radius, dependencies, patterns | Core utilities, shared libs |
📤 Output Skills
| Skill | Description | Use When |
|---|---|---|
| submit-github-review | Post review findings to GitHub PR via API | Submitting review to GitHub |
📋 Methodology
| Skill | Description |
|---|---|
| general-codereview | Google's classic 5-step methodology: Pre-screen → Understand → Verify → Optimize → Check |
Recommended Workflow
One-Command Pipeline (GitHub PRs)
Review PR 123This single command runs the full pipeline: fetch → triage → review → submit.
Quick Review (Local)
1. retrieve-diff-from-commit → Get local diff
2. codereview-orchestrator → Triage & route
3. Run recommended specialists in orderComprehensive Review
1. retrieve-diff-from-github-pr → Fetch PR diff
2. codereview-orchestrator → Triage and generate plan
3. codereview-security → Security issues
4. codereview-correctness → Logic bugs
5. codereview-api → Contract changes
6. codereview-data → Database safety
7. codereview-concurrency → Distributed concerns
8. codereview-performance → Optimization
9. codereview-testing → Test coverage
10. codereview-style → Final cleanup
11. submit-github-review → Post review to GitHubFinding Schema
All specialist skills output findings in a consistent format:
{
"severity": "blocker|major|minor|nit",
"category": "security|correctness|performance|...",
"evidence": {
"file": "path/to/file.ts",
"line": 42,
"snippet": "problematic code"
},
"impact": "What breaks or what's the risk",
"fix": "Suggested change",
"test": "What test would catch this"
}Feature Matrix
Pipeline Skills
| Feature | GitHub PR Input | Commit Input | GitHub Submit |
|---|---|---|---|
| Fetch PR via API | ✅ | ||
| Get Local Diff | ✅ | ||
| Post Review | ✅ | ||
| Inline Comments | ✅ | ||
| Approve/Request Changes | ✅ |
Review Skills
| Feature | Orchestrator | Security | Correct | API | Data | Concur | Perf | Observe | Test | Style | Config |
|---|---|---|---|---|---|---|---|---|---|---|---|
| PR Summary | ✅ | ||||||||||
| Risk Assessment | ✅ | ||||||||||
| Specialist Routing | ✅ | ||||||||||
| SQL Injection | ✅ | ||||||||||
| XSS/SSRF | ✅ | ||||||||||
| Auth Bypass | ✅ | ||||||||||
| Secret Detection | ✅ | ||||||||||
| Logic Bugs | ✅ | ||||||||||
| Error Handling | ✅ | ||||||||||
| Edge Cases | ✅ | ||||||||||
| Breaking Changes | ✅ | ||||||||||
| API Versioning | ✅ | ||||||||||
| Migration Safety | ✅ | ||||||||||
| Query Performance | ✅ | ||||||||||
| Transaction Safety | ✅ | ||||||||||
| Retry Logic | ✅ | ||||||||||
| Idempotency | ✅ | ||||||||||
| Race Conditions | ✅ | ||||||||||
| N+1 Detection | ✅ | ||||||||||
| Memory Leaks | ✅ | ||||||||||
| Caching | ✅ | ||||||||||
| Logging Quality | ✅ | ||||||||||
| Metrics Coverage | ✅ | ||||||||||
| Tracing | ✅ | ||||||||||
| Test Coverage | ✅ | ||||||||||
| Flaky Tests | ✅ | ||||||||||
| Code Readability | ✅ | ||||||||||
| Documentation | ✅ | ||||||||||
| Secret Management | ✅ | ||||||||||
| Feature Flags | ✅ |
Comparison with Industry Tools
| Feature | This Plugin | CodeRabbit | BugBot | Greptile |
|---|---|---|---|---|
| PR Summary | ✅ | ✅ | ||
| Interactive Chat | ❌ | ✅ | ||
| Security Analysis | ✅ | ✅ | ✅ | |
| Deep Context | ✅ | ✅ | ||
| Auto-fix Patches | ⚠️ Manual | ✅ | ||
| Low False Positives | ✅ | ✅ | ||
| Self-hosted | ✅ | |||
| Customizable | ✅ | |||
| GitHub API Integration | ✅ | ✅ | ✅ | ✅ |
| One-command Pipeline | ✅ | ✅ | ||
| Local Commit Review | ✅ |
License
MIT
Author
Zainan Victor Zhou
Based on "5 steps to perform code reviews at Google" (2013) and modern code review tools like CodeRabbit, Cursor BugBot, and Greptile.
Install & Usage
mkdir -p .claude/skillsmkdir -p .claude/skills && curl -o .claude/skills/codereview.md https://raw.githubusercontent.com/xinbenlv/codereview-skills/main/SKILL.md/codereviewFrequently Asked Questions
What is codereview?
Claude Skills for Code Review
How to install codereview?
To install codereview, create the .claude/skills directory in your project, then run the curl command to download the skill file. Once installed, invoke it in Claude Code with /codereview.
What is codereview best for?
codereview is a community categorized under General. It is designed for: code-review. Created by Zainan Victor Zhou.