diyu-code-reviewer

Analyze Python and TypeScript diffs for security, layer, and port-contract violations.

Updated Jul 11, 2026
One-click install
npx skills add https://github.com/andyan77/diyu-agent --skill diyu-code-reviewer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: diyu-code-reviewer
Source: https://github.com/andyan77/diyu-agent/tree/main/.claude/skills/diyu-code-reviewer
Command: npx skills add https://github.com/andyan77/diyu-agent --skill diyu-code-reviewer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manual code reviews are slow and error-prone; this Skill automates a triple-guard review of code changes to detect security issues, architectural violations, and contract mismatches.

Core Features & Use Cases

  • Guarded diff analysis: checks security, layer, and port-contract rules on code changes.
  • Output: generates a prioritized, human-readable Markdown report suitable for PR discussions and governance traceability.
  • Use Case: run on PRs to automatically surface critical violations before merge, or as a stand-alone audit on commits.

Quick Start

Review the latest git diff and generate a structured risk report for the changed files.

Frequently Asked Questions about diyu-code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review for pull requests to check security and architecture?▼

Automating code review for pull requests involves analyzing diffs against security, layer, and port-contract constraints. This Skill evaluates Python and TypeScript changes, applying triple-guard checks to generate a prioritized Markdown report for governance traceability.

What is static analysis for layer and port-contract violations in code diffs?▼

Static analysis for layer and port-contract violations examines code diffs to enforce architectural guardrails. It checks whether changes violate predefined layer dependencies or port contracts, detecting structural mismatches and security issues before merging.

Can I use automated diff analysis for both Python and TypeScript projects?▼

Yes, automated diff analysis supports both Python and TypeScript projects. The triple-guard code review evaluates backend and frontend code changes across these languages, checking for security, architectural layer, and port-contract violations.

How do I generate a Markdown report for code review findings in a pull request?▼

Generate a Markdown report for code review findings by running triple-guard diff analysis on your pull request. The Skill outputs a prioritized, human-readable Markdown document grading security, layer, and port-contract violations suitable for PR discussions.

Does this automated code review work on individual commits or only pull requests?▼

Automated code review works on both individual commits and pull requests. You can run the triple-guard diff analysis as a stand-alone audit on recent commits or integrate it to surface critical violations in PRs before merging.

What are the limitations of using diff-based static analysis for code reviews?▼

A limitation of diff-based static analysis is that it evaluates only changed code lines, potentially missing context-level architectural issues in the surrounding unchanged codebase. It focuses strictly on security, layer, and port-contract violations within the diff itself.