code-review

Reviews code for bugs, style, and best practices. Use when reviewing PRs or checking code quality.

Jump to install Review files

Repository: Tibsfox/gsd-skill-creator
Last source activity: April 25, 2026 at 21:14
Detected SKILL.md language: English
Stars: 70
Forks: 10

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Install with an AI assistant

Copy this prompt into the AI assistant you're using.

Follow https://skillsmp.com/skill-install/prompt.md to install only the Agent Skill at https://github.com/Tibsfox/gsd-skill-creator/tree/main/project-claude/skills/code-review.

A direct command skips the review prompt. Inspect the source before running it.

npx skills add https://github.com/Tibsfox/gsd-skill-creator --skill code-review

The command stays on one line. Scroll horizontally to inspect it before copying.

Prefer a local copy? Download the files currently available to SkillsMP.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

SKILL.md

Source instructions · Read-only preview

name: code-review
description: Reviews code for bugs, style, and best practices. Use when reviewing PRs or checking code quality.
version: 1.0.0
format: 2025-10-02T00:00:00.000Z
triggers: ["reviewing PRs or checking code quality"]
updated: 2026-04-25T00:00:00.000Z
status: ACTIVE

# Code Review ## Checklist **Correctness:** Logic errors, edge cases, off-by-one, resource leaks, race conditions, error handling **Security:** Input validation, injection (SQL/XSS), auth/authz, secrets exposure, CSRF **Performance:** N+1 queries, redundant work, memory leaks, blocking I/O, missing indexes **Maintainability:** Clear naming, single responsibility, DRY, test coverage ## Severity | Level | Action | |-------|--------| | CRITICAL | Security/data-loss risk — must fix | | MAJOR | Bug/performance — should fix | | MINOR | Code smell — consider fixing | | STYLE | Formatting — optional | ## Comment Format ``` ### [SEVERITY] Brief description **File:** path:line **Issue:** What's wrong **Suggestion:** Proposed fix ``` ## Flag These - `== true/false` → use boolean directly - `catch(e) {}` → swallowed error - Magic numbers → named constants - Deep nesting → early returns - Commented-out code → delete it

View on GitHub

Back to search Back to installation

goal-ambiguity-gate

Use the moment a request is underspecified and you are about to act on an ASSUMED goal. Enumerate the candidate goals the request could mean, project the action or artifact each one implies, and check whether they diverge: if two or more plausible goals lead to materially different actions or artifacts, ask exactly ONE targeted clarifying question; otherwise proceed on the most-likely goal and state the assumption in one line. Clarification is an evidence-producing action, not a delay — but one question, never an interrogation. Distinct from gsd-spec-phase (GSD-phase-bound, emits a heavy SPEC.md) and intent-router (fetch strategy, not goal disambiguation). Backed by agent goal-state inference (arxiv 2606.16813v1). Triggers on acting under an assumed goal when the request admits more than one materially different reading.

2026-07-19

memory-hubness-gate

Use at write time to vector/embedding memory — Grove content-addressed insertion, chroma/pgvector upserts, memory-consolidation promoting session traces to MEMORY.md, or embedding externally-ingested content. Scores each candidate record against a fixed panel of sentinel queries and quarantines any record that would become the nearest neighbor of too many unrelated queries — a hub — whether from adversarial poisoning or accidental over-generality. This is the memory-record-side sibling of skill-injection-guardian (file-side) and the write-side complement of memory-use-warrant (read-side). Quarantine, never silently drop; a human reviews. Backed by the admission-time hubness gate (arxiv 2606.19692v1). Triggers on inserting into vector memory, consolidating memory, and embedding stranger content.

2026-07-19

memory-use-warrant

Run this appropriateness check the moment you are about to integrate a retrieved long-term memory — a Grove content-addressed hit, a chroma/pgvector neighbour, a memory-consolidation digest, or a MEMORY.md line — into a response, especially anything touching private origins, Fox Companies IP, credentials, or Center Camp / consent-governed content. It answers a question intent-router never asks: not WHAT to fetch or HOW, but WHETHER a correctly-retrieved item should reach output. Relevance is not appropriateness — a perfect similarity match can still be a boundary violation. Default is FAIL-CLOSED: if in-context authorization is uncertain, the memory may inform behaviour but must not be surfaced. Backed by RBI-Eval (arxiv 2606.06055v1). Triggers on surfacing recalled sensitive memory into a response.

2026-07-19

View all from this repository

code-review

Source facts

Install options

Install with an AI assistant

Review the source files

More from this repository

Install with an AI assistant

More from this repository