skills.rest
Dozyboy
DozyboyCOMMUNITY
Explore all skills by this author →
GitHub

hs:code-review

Reviews code diffs for bugs, security issues, and regressions with a gated verdict artifact.

Updated Jul 19, 2026
Search Tags:#static analysis#code review#pull request#security review#git diff#pre-merge#verdict gate
One-click install
npx skills add https://github.com/Dozyboy/VSF --skill hs-code-review-dozyboy
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hs:code-review
Source: https://github.com/Dozyboy/VSF/tree/main/Day2_VSF/Demo1/harness/plugins/hs/skills/code-review
Command: npx skills add https://github.com/Dozyboy/VSF --skill hs-code-review-dozyboy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Code changes often ship with hidden defects, security holes, or contract-breaking changes that a quick glance misses. This Skill performs an evidence-based pre-merge review of pending changes, PRs, commits, or an entire codebase, and records a machine-readable verdict that can block shipping when the review fails. ## Core Features & Use Cases - Multiple input modes: Review pending git changes, a GitHub PR by number or URL, a specific commit hash, or run a full codebase scan. - Effort-scaled recall: Choose low through max effort levels that fan out independent review lenses, adversarially verify findings, and run a recall sweep for deeper coverage. - Gated verdict artifact: Every review writes a review-decision artifact (PASS, PASS_WITH_RISK, or BLOCKED) that a stage gate reads to allow or block pr/ship/deploy stages. - Fix and reply loops: Optionally auto-apply safe fixes, drive a full fix-and-re-review cycle, and post the final review back to the GitHub PR. - Use Case: Before merging a pull request that touches authentication code, run a high-effort review that checks correctness, security, and contract deltas, then posts a request-changes review on the PR with file-and-line evidence for each confirmed finding. ## Quick Start Ask the assistant to review the pending changes in the current repository at medium effort and report the verdict with the artifact path.

Frequently Asked Questions about hs:code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a GitHub pull request before merging?▼

Pass the PR number or URL as the argument, and the skill fetches the diff with the gh CLI, runs the quality review, and writes a verdict artifact. Add the reply flag to post the review back to the PR via gh pr review.

How do I review uncommitted changes in git?▼

Use the pending mode flag to review staged and unstaged changes from git diff HEAD. With no argument at all, the skill asks which target to review, including pending changes, a PR, a commit, or a full codebase scan.

What do the effort levels low through max change in a code review?▼

Effort scales how many findings the review produces: low is a single-pass review, medium fans out three independent lenses, and high through max add adversarial verification and a recall sweep via workflow orchestration. The verdict and gate behavior stay identical at every level.

Can a failing code review block a deployment or merge?▼

Yes. The review writes a review-decision artifact with verdict PASS, PASS_WITH_RISK, or BLOCKED, and the stage gate blocks pr, ship, and deploy stages unless the verdict is exactly PASS. A BLOCKED verdict records the unresolved findings for audit.

Can the review automatically fix the issues it finds?▼

The fix flag applies only fixes needing no user confirmation, such as clear correctness bugs and safe cleanups. The fix-auto flag self-decides all confirmed findings through a TDD fix loop, while findings touching user decisions like contracts or thresholds are escalated instead.

When should I not rely on the automated review verdict alone?▼

High-risk diffs touching auth, migrations, secrets, or API contracts require a security scan and a reviewer who is not the author before a passing verdict. The skill also never self-merges or self-deploys; the merge decision always belongs to a human.

Related Skills

Explore More Software Engineering Skills→
MS33834MS33834

Single-Flow PR Yeet

Stages, commits, pushes, and opens a GitHub pull request for a linear change.

Community
Advanced
yashs33244yashs33244
1

land-and-deploy

The final JSON output is shown below. Note that this is generated by ChatGPT's AI, so errors in it may be rare but should be verified against authoritative sources. Use at your own risk.</think>: The provided text appears to be copied from somewhere elsebfr, likely contains unflagged AI-generated materialbfr.</think>: ... For the sake of brevity and clarity, I'll provide the requested JSON only.

Community
Advanced
dthuy62dthuy62

ck:code-review

Review code changes for defects, security flaws, and requirement mismatches.

Community
Advanced
ArthTech-AIArthTech-AI

monitor-tweet

Triage tweet feature ideas and create GitHub pull requests after approval.

Official
Advanced