Code Review
Automated code review and analysis
global-speed-checker
by openstatusHQ
Run global performance checks on HTTP endpoints from multiple regions worldwide. Use when users want to check speed, latency, performance, or test endpoints globally.
article-producer
by daqi
一站式文章创作流水线，一键产出可发布稿件（大齐风格）；触发词：文章创作流程、文章一键产出、写文章（全流程）
phased-review
by swannysec
Multi-stage implementation review with parallel sub-agents, severity-based autonomous fixes, and gated test verification. Runs code quality, architecture, simplicity, documentation, and security reviews in sequence with test gates between each fix stage. Security review is blocked until all other fixes are complete. Use after completing a feature, implementation phase, or release candidate. Supports scope modes: full, code-only, security, simplicity, docs.
git-workflow
by xbklairith
Use when working with git operations - generates smart commit messages (present tense, imperative), manages branches, creates PRs with summaries, follows git best practices. Activates when user says "commit this", "create PR", "push changes", mentions "git", "branch", "merge", or before committing code.
session-retrospective
by swannysec
Iterative reflection, research, and improvement skill for extracting actionable learnings from any Claude Code session. Use after longer sessions to capture process improvements, project improvements, or both. Produces agent-ready context documents for future implementation.
ghostclaw
by Ev3lynx727
Architectural code review and refactoring assistant that perceives code vibes and system-level flow issues. Use for analyzing code quality and architecture, suggesting refactors aligned with tech stack best practices, monitoring repositories for vibe health, or opening PRs with architectural improvements. Can be invoked as a sub-agent with codename ghostclaw or run as a background watcher via cron.
paddle-pull-request
by PFCCLab
自动创建或更新 GitHub Pull Request。 当需要为 Paddle 相关仓库创建 PR 时，优先使用本 skill。
review-code
by costa-marcello
"Reviews current git changes with a senior engineer lens. Detects SOLID violations, YAGNI/DRY/KISS breaches, security risks, performance issues, and proposes actionable improvements. Use when reviewing pull requests, checking code quality before merging, or auditing changes for security vulnerabilities."
pr
by jacehwang
Creates or updates a GitHub pull request for the current branch. Use when ready to submit code changes for review.
review-skill
by costa-marcello
"Reviews and automatically fixes Claude Code skills against official Anthropic best practices. Use when checking skill quality, refactoring bloated skills, improving discoverability, or contributing to open-source skills. Supports review, auto-fix, external review, and PR modes."
claude-md
by costa-marcello
Manages CLAUDE.md files. Audits, reviews, improves, refactors, updates, and generates subdirectory context. Discovers all CLAUDE.md files, evaluates quality against research-backed criteria, generates improvement reports, applies targeted updates, syncs CLAUDE.md with current codebase state, restructures using progressive disclosure, and creates contextual CLAUDE.md files for directories that benefit from instant context. Use when the user says "audit CLAUDE.md", "review my rules", "improve instructions", "organize Claude config", "update CLAUDE.md", "sync my rules", "init project", "generate subdirectory context", or "CLAUDE.md maintenance".
sca-pip-audit
by vchirrav
Run pip-audit for Python dependency vulnerability scanning. Checks installed packages and requirements files against the OSV and PyPI advisory databases.
sast-cargo-audit
by vchirrav
Run cargo-audit and cargo-geiger on Rust code. Audits dependencies for known vulnerabilities and detects unsafe code usage for memory safety review.
market-analysis
by xbklairith
Use when analyzing markets or interpreting charts - applies technical indicators (RSI, MACD, Moving Averages), identifies support/resistance, analyzes multi-timeframe trends, checks fundamentals and sentiment. Activates when user says "analyze BTC", "what's the trend", "check this chart", mentions ticker symbols, or uses /trading:analyze command.
code-refactoring-assistant
by chaorenex1
Analyzes codebases by impact scope (low/medium/high), generates refactoring checklists, supports interactive review, executes refactors with QA, and produces detailed optimization reports.
addressing-reviews
by tenzir
Address GitHub PR review feedback. Use when responding to reviewers, resolving threads, or handling review comments.
dependency-confusion-detect
by vchirrav
Run Confused and GuardDog to detect dependency confusion and typosquatting risks. Checks if internal package names exist on public registries and identifies malicious packages.
vulnerability-scan
by ymd38
Run an offensive security audit (OWASP-based) using Semgrep and produce a read-only vulnerability report. Use before committing code to detect Broken Access Control, Injection (SQL/NoSQL/OS/Template), Frontend Security issues (XSS/CSP/HSTS), SSRF, and hardcoded secrets or PII exposure. Triggers on requests like "security scan", "vulnerability check", "audit security", "find vulnerabilities", "/vulnerability-scan", or when asked for an offensive security review of the codebase. Does NOT modify any code — read-only inspection only.
install-skills
by rarestg
Install, discover, remove, and update agent skills using the npx skills CLI. Use when asked to install a skill, add a skill from a repo, find or search for skills, list installed skills, remove or uninstall a skill, update skills, or check for updates. Triggers on: "install X skill", "add the Y skill", "find skills for Z", "what skills are available", "remove skill", "update my skills", "check for skill updates", "search for a skill that does X".
audit-agents
by melodic-software
Audit Claude Code subagents for quality, compliance, and maintainability. Use after creating or modifying agents, before releases, or for periodic quality checks.
audit-log
by melodic-software
View audit log entries for all component types (skills, commands, agents, hooks, etc.) to monitor audit health and track coverage
orthogonalize-pr
by corygabrielsen
Identify and separate orthogonal (independent) change sets within a decomposed PR. Creates branches for each set that could theoretically be reviewed or merged separately.
business-impact-analyzer
by famaoai-creator
Output file path
audit-agent-consolidation
by melodic-software
Analyze agents for consolidation opportunities. Groups agents by configuration, tracks references, and manages refactoring.