agent-react-reviewer

Reviews React and JSX code for hook correctness, accessibility, security, and render performance.

5|15|Updated Jul 8, 2026
One-click install
npx skills add https://github.com/clfigueiredo/hermes-infra-skills --skill agent-react-reviewer-clfigueiredo
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agent-react-reviewer
Source: https://github.com/clfigueiredo/hermes-infra-skills/tree/main/.hermes/skills/curso-hermes/agent-react-reviewer
Command: npx skills add https://github.com/clfigueiredo/hermes-infra-skills --skill agent-react-reviewer-clfigueiredo

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Reviewing React pull requests by hand is slow and easy to get wrong: hook dependency bugs, unsafe dangerouslySetInnerHTML usage, accessibility gaps, and server/client boundary leaks slip through. This Skill operationalizes a senior React reviewer that inspects .tsx/.jsx diffs and reports actionable findings grouped by severity. ## Core Features & Use Cases - React-specific code review: Audits hook rules, dependency arrays, state mutation, key props, derived state, and render performance in .tsx/.jsx files. - Security and accessibility checks: Flags unsanitized dangerouslySetInnerHTML, unsafe URL schemes, Server Actions without validation, leaked secrets via NEXT_PUBLIC_* variables, missing labels, and ARIA misuse. - Severity-ranked output: Reports findings as CRITICAL, HIGH, or MEDIUM with file path, line number, impact, and concrete fix, plus an approve/warning/block verdict. - Use Case: Before merging a Next.js pull request, run the review on the staged diff to catch a missing useEffect cleanup, a javascript: href, and a Server Action lacking input validation before they reach production. ## Quick Start Ask the agent to review the staged React changes in this project and report any hook, security, or accessibility issues with file and line references.

Frequently Asked Questions about agent-react-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review React code for hook rule violations?▼

Run ESLint with eslint-plugin-react-hooks enabled, checking rules-of-hooks and exhaustive-deps. The review flags conditional hook calls, missing dependency array entries, missing cleanups, and stale closures, each with file path, line number, and a concrete fix.

What security issues should a React code review check?▼

A React security review checks unsanitized dangerouslySetInnerHTML, javascript: or data: URL schemes in href/src, Server Actions without input validation, secrets exposed via NEXT_PUBLIC_* or VITE_* variables, and session tokens stored in localStorage.

Does this review work with Next.js App Router projects?▼

Yes, it covers Next.js App Router concerns including server-only imports in Client Components, use client directive propagation, sensitive data passed from Server to Client Components, and Server Actions missing authorization checks.

What is the difference between react-reviewer and typescript-reviewer?▼

react-reviewer owns React-specific lanes: hooks, JSX accessibility, server/client boundaries, and render performance. typescript-reviewer owns generic TypeScript type safety, async correctness, and Node.js security. Both should run together on .tsx/.jsx pull requests.

Why does my React review report no findings on a TypeScript-only change?▼

The review only inspects .tsx and .jsx files. If the diff contains no JSX/TSX changes, it defers to the typescript-reviewer and stops, since pure .ts files have no React-specific concerns to audit.