agentleFS
axrmxvaxrmxv/claude-config/skills/review-changes/SKILL.md

review-changes

Skill1 starsChanged 4 months agoMITView on GitHub

Review the current uncommitted or branch changes for quality and security before commit. Runs the code-reviewer and security-reviewer agents together and reports findings by severity, blocking on CRITICAL.

34 other projects use a version of this.

Adopted by

Most recently taken up by

Used with

Projects with it also use explore-codebase, debug-issue and 10 more.

Other files people use alongside this one.

Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
  • srclightSkill

    explore-codebase

    This skill should be used when the user asks to "explore this codebase", "understand this project", "give me an overview", "how does this work", "onboard me", "walk me through the architecture", "map the codebase", or any request to understand a codebase's structure, architecture, or design.

    Also in 4 projects that use this

  • NVIDIASkill

    debug-issue

    Use when the user asks to debug, investigate, or fix a GitHub issue or supplies a repository bug report.

    Also in 4 projects that use this

  • srclightSkill

    refactor-safely

    This skill should be used when the user asks to "refactor", "rename", "move", "change a function signature", "extract a method", "delete unused code", "clean up", or any modification that could break callers or dependents. Provides a pre-change safety checklist using srclight's graph tools to assess blast radius before touching code.

    Also in 4 projects that use this

  • JetBrainsSkill

    fix-bug

    End-to-end bug fix workflow for the Exposed project. Accepts a GitHub issue (#NUMBER), YouTrack issue (EXPOSED-NUMBER), or YouTrack URL (https://youtrack.jetbrains.com/issue/EXPOSED-NUMBER). Fetches the issue, creates a failing reproducer test, commits on a new branch, implements the fix, validates, and opens a PR. Use this skill whenever the user wants to fix a bug from an issue tracker, mentions a EXPOSED issue number, or references a GitHub issue to fix.

    Also in 3 projects that use this

  • SentrySkill

    write-tests

    Write tests following project conventions. Use when adding new tests or modifying existing ones.

    Also in 3 projects that use this

  • GitHubSkill

    refactor

    Surgical code refactoring to improve maintainability without changing behavior. Covers extracting functions, renaming variables, breaking down god functions, improving type safety, eliminating code smells, and applying design patterns. Less drastic than repo-rebuilder; use for gradual improvements.

    Also in 3 projects that use this

The file

We split this skill into the rules it gives an agent

4 rules. 0 are common, 3 are distinctive, and 1 is very specific to this project.

  • 0

    Common

    Most of the 33 edited versions we read keep these.

  • 3

    Distinctive

    This author's own choices. Worth a look.

  • 1

    Very specific

    Tied to their project's names, files or tools. Probably skip.

  • Common
  • Distinctive
  • Very specific
  1. Distinctive:

    Add a language-specific reviewer only if it is already defined — as a project agent, or as one listed in this plugin's roster.

    line 27
  2. Distinctive:

    No merge conflicts; branch is up to date with its target.

    line 34
  3. Very specific:

    No leftover debug statements (print, console.log) or commented-out code.

    line 35
  4. Distinctive:

    No hardcoded secrets, keys, or tokens anywhere in the diff.

    line 36

“Common” is measured: kept by at least 6 in 10 of the 33 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.
Files
SKILL.md

Changes under review

git status --short --branch
git diff --stat HEAD
git log --oneline -5

Task

Review these changes. Start by running git diff (and git diff <base>...HEAD for the full branch, where <base> is the branch this will merge into) so you are reviewing the actual content, not just the summary above. Launch both reviewers in parallel — they are independent:

  • code-reviewer — quality, patterns, maintainability.
  • security-reviewer — OWASP Top 10, secrets, injection, authz, information disclosure.

Both ship with this plugin, so they may be namespaced as claude-standards:code-reviewer and claude-standards:security-reviewer. Use whichever form your agent list actually shows.

Add a language-specific reviewer only if it is already defined — as a project agent, or as one listed in this plugin's roster. Do not invent a reviewer name and hope it resolves; if the agent does not exist, say so and review that dimension yourself rather than silently skipping it.

While the agents run, check the mechanical gates yourself:

  • Automated checks pass (lint, types, tests) and coverage is ≥80%.
  • No merge conflicts; branch is up to date with its target.
  • No leftover debug statements (print, console.log) or commented-out code.
  • No hardcoded secrets, keys, or tokens anywhere in the diff.

Output

Merge both agents' findings into one list, grouped by file, ordered by severity:

LevelMeaningAction
CRITICALSecurity vulnerability or data-loss riskBLOCK — must fix before merge
HIGHBug or significant quality issueWARN — should fix before merge
MEDIUMMaintainability concernINFO — consider fixing
LOWStyle or minor suggestionNOTE — optional

Each finding needs a location and a concrete fix, not just a complaint.

End with an explicit verdict: Approve (no CRITICAL or HIGH), Warning (HIGH only), or Block (any CRITICAL). If any secret may have been exposed, say so first and recommend rotating it.

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.