ワンクリックで
code-review
Security and quality review of code changes. Supports branch comparison (default) and uncommitted changes modes.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
メニュー
Security and quality review of code changes. Supports branch comparison (default) and uncommitted changes modes.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Full codebase consistency scan. Checks all hand-written source files against project coding rules for style, pattern, and quality violations. Excludes auto-generated files and node_modules. Use periodically (e.g. before a release or after onboarding new team members) to catch drift from project standards.
Pre-PR quality check with adaptive agent selection, code simplification with user approval, and optimized validation. Scales review depth by diff size.
Post-implementation side effect analysis. Checks consumer impact, shared state, UI components, function signatures, and layout cascade for unintended regressions.
Show concise summary of all changes on current branch vs parent branch. Outputs grouped bullet-point list.
Create React UI components. Use when building new components, forms, dialogs, data tables, or implementing UI features. Guides through component creation workflow from planning to verification.
Debug UI issues using Chrome browser automation. Use when investigating visual bugs, console errors, network failures, or unexpected component behavior. Requires --chrome flag.
| name | code-review |
| description | Security and quality review of code changes. Supports branch comparison (default) and uncommitted changes modes. |
skill(name="code-review") # Branch comparison (default)
skill(name="code-review", user_message="mode=uncommitted") # Uncommitted changes only
Run date to get the accurate local time for the report filename:
date +"%Y%m%d-%H%M"
Store the result as $TIMESTAMP for use in step 4.
Detect parent branch dynamically:
git config branch.<current>.merge — check tracking configgit log --oneline --decorate --first-parent — find branch pointgit merge-base with common bases (master, main, develop) — pick closest ancestorAlways prefer origin/<parent> over local parent (may be stale).
Get changed files and diff (triple-dot = branch-unique changes only):
git diff --name-only origin/<parent>...HEAD
git diff origin/<parent>...HEAD
git diff --name-only HEAD
git status --short
If the diff exceeds ~2000 lines, review file-by-file using subagents instead of reading the entire diff at once.
Delegate the review to the code-reviewer agent. Pass the list of changed files from step 2.
The agent handles:
.claude/rules/ for project standardspnpm typecheck, pnpm lint)Do NOT duplicate the agent's review logic in this skill. The agent is the single source of truth for review criteria and fix workflow.
After the agent completes, compile its output into a report.
Output: ./report/$TIMESTAMP-code-review.md (create report/ if needed).
# Code Review Report - YYYY-MM-DD HH:MM
## Review Context
- **Mode**: [Branch Comparison / Uncommitted Changes]
- **Parent Branch**: [branch-name] (if branch comparison)
- **Files reviewed**: N
## Summary
- Issues found: N (Critical: N, Warning: N, Suggestion: N)
- Status: [APPROVED / APPROVED WITH COMMENTS / CHANGES REQUESTED]
## Detailed Findings
### [SEVERITY] File: path/to/file.ts
- **Line**: N
- **Issue**: Description
- **Fix Applied**: diff snippet (if fixed by agent)
## Improvement Proposals
### [SEVERITY] Proposal title
**Current** (`path/to/file.ts:L42`):
\`\`\`typescript
// current code snippet
\`\`\`
**Proposed**:
\`\`\`typescript
// improved code snippet
\`\`\`
CRITICAL issues found → CHANGES REQUESTED. Never approve code with security vulnerabilities.