New: 97,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Review Code

by hmislk in hmislk/hmis

Review code changes following HMIS project standards. An agent skill from hmislk/hmis.

GPL-3.0Auto-check: notesDevelopment

Install Review Code

skills CLI
$ npx skills add hmislk/hmis --skill review-code -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install hmislk/hmis review-code --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/hmislk/hmis.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.codex/skills/review-code .claude/skills/review-code && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
review-code
GitHub stars
236
Token cost
~567 tokens
SKILL.md length
233 words
Files
1
Skills in repo
33
Repo updated
First seen
Licence
GPL-3.0

At a glance

Review code changes following HMIS project standards. An agent skill from hmislk/hmis.

  • Works in 7 steps: Backward Compatibility → AI Suggestion Verification → Persistence Configuration → …
  • Reviewing a pull request
  • SKILL.md covers Review Checklist and Process
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Review Code is an agent skill from hmislk/hmis. Review code changes following HMIS project standards. Use when reviewing a pull request, verifying code changes, or checking code quality. Covers CodeRabbit verification, backward compatibility, persistence checks, and project-specific patterns.

Its SKILL.md is about 570 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Development, covering Code review and Code quality. The repository describes itself as: This is an Open Source Java EE based Hospital Information Management System. The licence is GPL-3.0.

When your agent uses it

  • Reviewing a pull request
  • Verifying code changes
  • Checking code quality

Example prompts

  • “/review-code”

Requirements

  • Pre-approved tools (allowed-tools): Read, Grep, Glob, Bash

Workflow steps

7 steps, taken from the step headings in SKILL.md.

  1. Backward Compatibility
  2. AI Suggestion Verification
  3. Persistence Configuration
  4. JSF/XHTML Rules
  5. DTO Patterns
  6. Security
  7. Query Patterns

What it can do on your machine

Read from SKILL.md and the folder at commit 1820c4a. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Grep
    • Glob
    • Bash

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Review Code loads about 567 tokens when it runs. Until then it costs about 64 tokens; SKILL.md has 233 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~64
When it runs · the whole SKILL.md, loaded when a task matches
~567

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Read, Grep, Glob, Bash

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from hmislk/hmis at commit 1820c4a, republished under its GPL-3.0 licence (© hmislk). 233 words, ~567 tokens.

Download SKILL.mdSave it as .claude/skills/review-code/SKILL.md (or your agent's skills folder).
name
review-code
description
Review code changes following HMIS project standards. Use when reviewing a pull request, verifying code changes, or checking code quality. Covers CodeRabbit verification, backward compatibility, persistence checks, and project-specific patterns.
allowed-tools
Read, Grep, Glob, Bash
disable-model-invocation
true
argument-hint
[file-or-pr]

Code Review Guidelines

Review code changes following HMIS project standards and patterns.

Review Checklist

1. Backward Compatibility
  • No modified existing constructor signatures
  • No renamed database columns (e.g., purcahseRate is intentional)
  • No renamed composite components without checking ALL usage
  • Entity properties kept alongside new DTO properties
2. AI Suggestion Verification
  • Never accept CodeRabbit/AI suggestions without verification
  • Check for existing implementations before adding null checks
  • Verify lazy initialization patterns (e.g., getBillFinanceDetails() already handles nulls)
  • Search codebase for existing patterns before adding new code
3. Persistence Configuration
  • persistence.xml must NOT contain hardcoded JNDI names
  • Must use ${JDBC_DATASOURCE} and ${JDBC_AUDIT_DATASOURCE}
  • No hardcoded DDL generation paths
4. JSF/XHTML Rules
  • AJAX update targets must be JSF components (not plain HTML)
  • No CSS/jQuery selectors in update/process attributes
  • Use h:outputText instead of HTML headings
  • PrimeFaces button classes, not Bootstrap
5. DTO Patterns
  • Direct JPQL constructor queries (not entity-to-DTO loops)
  • Use findLightsByJpql() with explicit cast
  • Only persisted fields in JPQL (not derived properties)
  • Wrapper types in DTO constructors
6. Security
  • New privileges added to Privileges.java enum (not reordering)
  • Privilege checks in controllers and XHTML rendered attributes
  • No credentials committed to git
7. Query Patterns
  • retired = false included in queries
  • inactive = false for item filtering where applicable
  • Proper null handling for optional relationships (LEFT JOIN)

Process

  1. Read the changed files
  2. Check each item in the checklist above
  3. Report findings with specific file:line references
  4. Suggest fixes for any issues found

© hmislk, GPL-3.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .codex/skills/review-code of hmislk/hmis.

Open the folder on GitHubat commit 1820c4a

Compare with similar skills

Review Code next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Review Code compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Review Code this skillhmislk/hmis236—~567Automated safety check: NotesGPL-3.0
WooCommerce Code Reviewwoocommerce/woocommerce11k3 repos~1.1kAutomated safety check: PassCustom licence
Skill Doli Code ReviewDolibarr/dolibarr7.7k1 repos~1.1kAutomated safety check: PassMIT
Dignified Python Standardsdocling-project/docling68k—~1.5kAutomated safety check: PassApache-2.0
Clean Code GuardamElnagdy/guard-skills1.3k2 repos~4.3kAutomated safety check: PassMIT
Archify Reviewtt-a1i/archify79k—~415Automated safety check: PassMIT

Similar skills

  • WooCommerce Code Review

    woocommerce/woocommerce

    Reviews WooCommerce code changes against the project's standards, flagging backend PHP architecture, naming, documentation, data integrity and testing violations.

    11k GitHub starsUsed in 3 repos~1.1k tokens
    DevelopmentAuto-check passed

  • Skill Doli Code Review

    Dolibarr/dolibarr

    Reviews Dolibarr PHP code for compliance with coding standards and security best practices, and fixes identified issues.

    7.7k GitHub starsUsed in 1 repo~1.1k tokens
    DevelopmentAuto-check passed

  • Dignified Python Standards

    docling-project/docling

    Applies opinionated production Python conventions chosen by the project's Python version: modern type syntax, pathlib, explicit checks and interface guidance.

    68k GitHub stars~1.5k tokensUpdated yesterday
    DevelopmentAuto-check passed

  • Clean Code Guard

    amElnagdy/guard-skills

    Reviews generated or changed production code against Clean Code, SOLID, DRY, KISS, YAGNI and LLM-specific failure modes before it ships, in any language.

    1.3k GitHub starsUsed in 2 repos~4.3k tokens
    DevelopmentAuto-check passed

  • Archify Review

    tt-a1i/archify

    Review Archify issues, PRs, or code through value, cost, and impact to support evidence-based maintenance decisions. Use for issue triage, change reviews, and…

    79k GitHub stars~415 tokensUpdated yesterday
    DevelopmentAuto-check passed

  • Code Review Skill

    awesome-skills/code-review-skill

    Provides comprehensive code review guidance for React 19, Vue 3, Angular 17+, Svelte 5, Rust, TypeScript, Java, Java 8, PHP, Ruby, Rails, Python, Django, FastAPI, Go, C/.NET, Kotlin, Swift, Dart…

    2.1k GitHub stars~2.8k tokensUpdated 29 days ago
    DevelopmentAuto-check: notes

More from hmislk/hmis

All 33 skills in this repo

  • API Usage

    hmislk/hmis

    Reference for calling existing HMIS REST APIs. An agent skill from hmislk/hmis.

    236 GitHub stars~1.1k tokensUpdated yesterday
    Auto-check passed

  • App Configuration

    hmislk/hmis

    Application configuration options reference for the HMIS project.

    236 GitHub stars~474 tokensUpdated yesterday
    Auto-check passed

  • Caveman

    hmislk/hmis

    Ultra-compressed communication mode. An agent skill from hmislk/hmis.

    236 GitHub starsUsed in 21 repos~946 tokens
    Auto-check passed

  • Database Guide

    hmislk/hmis

    MySQL database development guide for the HMIS project. An agent skill from hmislk/hmis.

    236 GitHub stars~664 tokensUpdated yesterday
    Auto-check passed

  • Demo Video

    hmislk/hmis

    A skill your agent uses when asked to make a demo, training, how-to or tutorial video with sound or voice-over showing an HMIS function or configuration (e.g.

    236 GitHub stars~3.9k tokensUpdated yesterday
    Auto-check passed

  • Deploy QA

    hmislk/hmis

    Sync development into QA/testing environment branches (QA1-QA4, local RH staging) via PR + merge on GitHub.

    236 GitHub stars~2.1k tokensUpdated yesterday
    Auto-check: notes

Categories

Questions about Review Code

What does Review Code do?

Review code changes following HMIS project standards. An agent skill from hmislk/hmis. Review Code is an agent skill from hmislk/hmis. Review code changes following HMIS project standards.

When should I use Review Code?

Review Code fits situations like: reviewing a pull request; verifying code changes; checking code quality.

How do I install Review Code in Claude Code?

Run `npx skills add hmislk/hmis --skill review-code -a claude-code`. Or copy the skill folder (.codex/skills/review-code in hmislk/hmis) into .claude/skills/review-code in your project. Claude Code loads it when a task matches its description.

How do I install Review Code in Codex?

Run `npx skills add hmislk/hmis --skill review-code -a codex`. Or copy the skill folder (.codex/skills/review-code in hmislk/hmis) into .agents/skills/review-code in your project. Codex loads it when a task matches its description.

Can I use Review Code in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add hmislk/hmis --skill review-code -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/review-code, .gemini/skills/review-code, .github/skills/review-code and .opencode/skills/review-code in your project.

What does Review Code need to run?

SKILL.md names no scripts, command-line tools or credentials: Review Code is instructions for the agent only. Its frontmatter pre-approves these tools: Read, Grep, Glob, Bash.

Does Review Code access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Review Code safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Review Code use?

Review Code is published under the GPL-3.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Review Code use?

About 567 tokens (SKILL.md is roughly 2.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Review Code?

Skills that share tags, products or a category with Review Code: WooCommerce Code Review (woocommerce/woocommerce, 11k stars), Skill Doli Code Review (Dolibarr/dolibarr, 7.7k stars), Dignified Python Standards (docling-project/docling, 68k stars) and Clean Code Guard (amElnagdy/guard-skills, 1.3k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Review Code?

hmislk (a GitHub organization) maintains it in hmislk/hmis, which has 236 GitHub stars. The repository holds 33 skills in this directory. The repository was last updated on October 7, 2026.

Source: hmislk/hmis on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.