review-releng

Reviews pull requests for revertability, blast radius, observability, and rollout safety.

Updated May 19, 2026
One-click install
npx skills add https://github.com/kmosher/claude-plugins --skill review-releng-kmosher
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review-releng
Source: https://github.com/kmosher/claude-plugins/tree/main/plugins/kmosher-review/skills/review-releng
Command: npx skills add https://github.com/kmosher/claude-plugins --skill review-releng-kmosher

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Code that passes tests can still be unsafe to deploy: it may lack a revert path, expose unbounded blast radius, ship without metrics, or roll out to 100% of traffic with no kill switch. This Skill reviews PRs through a release-engineering lens so operational risks are caught before merge, not during a 3am page. ## Core Features & Use Cases - Operational readiness checklist: Systematically flags revertability gaps, blast-radius risks, missing observability, unsafe rollout plans, and performance regressions on hot paths. - Build and release path review: Covers Makefiles, Dockerfiles, CI workflows, and release automation that other review lenses skip. - Structured findings: Emits JSONL findings with severity (P0–P3), the check that fired, and—for P0/P1—the mitigating deployment pattern, observability signal, and rollback procedure. - Use Case: A PR adds an endpoint calling a third-party billing API with no timeout, no per-endpoint metrics, and a direct-to-production deploy. The review surfaces three P1 findings (missing timeout, missing metrics, no feature flag) with concrete mitigations before merge. ## Quick Start Ask the AI to review the current branch or PR for operational readiness and deploy safety using the release-engineering checklist.

Frequently Asked Questions about review-releng

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a PR for deployment safety before merging?▼

Run an operational readiness review that checks revertability, blast radius, observability, and rollout safety. The Skill applies a checklist covering git revert sufficiency, kill switches, metrics existing before ship, and staged rollout plans, returning severity-ranked findings.

What does a release-engineering code review check for?▼

It checks whether a change can be built, deployed safely, observed in production, and reverted quickly. Specific checks include schema migration plans, feature flag coverage, timeouts on new external dependencies, per-endpoint metrics, and hot-path performance regressions.

Does this review cover CI configs and Dockerfiles?▼

Yes, the build and release path is explicitly in scope: Makefiles, Dockerfiles, .dockerignore, CI workflow definitions, and release automation. The Skill treats build-path bugs as paging risks equivalent to bad deploys.

When should I not use an operational readiness review?▼

Skip it for pure CLI or library changes with no runtime deploy surface and no build-path changes, documentation-only PRs, test-only PRs, and local-dev tools. It assumes the change's logic is already correct, so run a correctness review first.

How are review findings prioritized and reported?▼

Findings are ranked P0 (will cause incident on deploy) through P3 (preference) and emitted as JSONL with the check that fired and a category. P0 and P1 findings also include a mitigating deployment pattern, an observability signal, and an explicit rollback procedure.