code-review

Performs production-ready code reviews on git changes. Supports commit/range/file-scoped analysis, impact assessment, breaking-change detection, confidence-aware finding classification, and risk-weighted verdict generation.

Safety Notice

This listing is imported from skills.sh public index metadata. Review upstream SKILL.md and repository scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "code-review" with this command: npx skills add buyoung/skills/buyoung-skills-code-review

Code Review Capabilities

Structured capability set for reviewing git changes with evidence-backed findings and risk-aware verdicts.

Tools

  • Git CLI: Retrieves commit metadata, diffs, range context, and history graph information
  • Search tools (rg, fd): Traces references, consumer impact, and related tests across repositories

Domains

  • Change analysis: Diff interpretation, file classification, and change-scope characterization
  • Impact assessment: Consumer tracing, publicly exposed contract impact, behavioral regression risk
  • Risk evaluation: Severity classification, confidence modeling, and verdict generation

Input Contract

Review targets support three input shapes:

Target TypeRequired FieldsDescription
Single Commitcommit_hashReviews one commit and its patch-level changes
Commit Rangestart_hash, end_hashReviews a contiguous range where start_hash is earliest and end_hash is latest
File-Scopedtarget (commit_hash or range) + file_path[]Limits analysis to selected files within the target

Preconditions

  • Repository context is available and readable by git
  • Target commit or range can be resolved from repository history
  • Diff and metadata can be retrieved for the target
  • If analysis preconditions fail (unknown hash, missing parent, ambiguous range), limitations are recorded in the review output

Core Capabilities

  • Commit and Range Analysis: Collects metadata, patch details, and structural change information
  • Change Classification: Categorizes files by role and change type for review prioritization
  • Impact Detection: Traces direct and indirect consumers to estimate runtime and contract impact
  • Breaking Change Detection: Identifies incompatible changes on externally consumable contracts
  • Confidence-Aware Findings: Attaches evidence confidence and verification status to each finding
  • Risk-Weighted Verdicts: Combines severity, confidence, and critical-domain context to determine outcome

Output Contract

Review output consists of:

  • Findings: Each finding includes severity, evidence, impact, confidence, verification status, and remediation suggestion
  • Verdict: APPROVE, COMMENT, or REQUEST_CHANGES with explicit decision rationale
  • Analysis Limitations: Unverifiable areas and constraints discovered during review
  • Risk Context: Critical-domain exposure and weighted risk interpretation

Supported Analysis Types

  • Commit Range: Review changes across a start~end commit range (start = earliest, end = latest)
  • Single Commit: Review changes in a specific commit hash
  • File-Scoped: Review specific files within a commit or range

Validation Scenarios

  • Root Commit Review: Handles commits without parents via root-safe diff retrieval
  • Merge Commit Review: Preserves first-parent and combined-merge perspectives for consistent interpretation
  • Breaking Change + Consumer Counting: Uses normalized consumer counting to reduce false positives
  • Dynamic/Reflective Usage: Reports unverifiable linkage with reduced confidence
  • Behavior Coverage Risk: Escalates risk when changed behavior lacks relevant test coverage
  • Verdict Reproducibility: Produces stable verdicts from deterministic weighted risk rules

Severity Levels

LevelScope
CriticalSecurity exposure, data integrity risk, service availability risk, externally breaking contract changes
MajorBehavioral defects, reliability degradation, significant performance or observability regressions
MinorMaintainability, readability, and medium-term quality concerns
NitLow-impact consistency and polish suggestions

Technical References

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Related Skills

Related by shared tags or category signals.

Coding

code-review

No summary provided by upstream source.

Repository SourceNeeds Review
Coding

code-review

No summary provided by upstream source.

Repository SourceNeeds Review
Coding

code-review

No summary provided by upstream source.

Repository SourceNeeds Review
Coding

code-review

No summary provided by upstream source.

Repository SourceNeeds Review