code-review-agents

Code Review Agentの性能評価を実行するスキル。Gold setとSeeded setを準備し、A2Aサーバーをバックグラウンドで起動し、評価スクリプトを実行して結果をObsidianに保存する。次のような要求で必ずこのスキルを使うこと: 「評価を実行してください」「性能評価をしてください」「run evaluation」「評価パイプライン」「Agentのスコアを確認したい」「review agentの精度を測りたい」

Performs security code review of SPA and MPA web applications by analyzing GitHub PR file changes, patches, and project context to identify vulnerabilities. Use when asked to review code for security issues, perform a security audit of a PR, check for XSS/CSRF/SQLi/auth flaws, or evaluate any web application code for security risks.

Applies framework-specific review checks to a frontend PR — component design, hook/reactivity patterns, and framework-specific XSS vectors for React, Vue.js, Angular, and Svelte. Use when the diff touches component files, hooks, composables, directives, or stores. Detect the framework from DEPENDENCIES and file extensions, then load only the matching reference file. Use Context7 MCP when a framework API in the patch is version-specific or unfamiliar.

Applies language-specific review checks to a frontend PR — TypeScript type safety (any, unsafe assertions, non-null, duplicate types) and JavaScript-specific pitfalls (implicit coercion, prototype pollution, missing strict mode). Use when the diff contains .ts, .tsx, .vue with lang="ts", .svelte with lang="ts" for TypeScript; or .js, .mjs, .cjs, .jsx files for JavaScript. Load only the reference file matching the language detected from DEPENDENCIES and file extensions.

Applies meta-framework-specific and SSR/hydration review checks to a frontend PR — Server/Client component boundaries, data fetching placement, environment variable exposure, routing configuration, and hydration mismatches for Next.js, Nuxt.js, and SvelteKit. Use when DEPENDENCIES includes "next", "nuxt", or "@sveltejs/kit", or when the diff touches pages, layouts, server routes, middleware, or framework config files. Load the SSR common reference first, then load only the reference file matching the detected meta-framework.

Applies framework-agnostic review checks to any frontend PR — logic correctness, async error handling, edge cases, race conditions, accessibility, security (XSS, secrets, env vars), dependency audit, performance, and test quality. Use on every PR regardless of framework. Load specific reference files only for the check categories relevant to the diff.