Agent skill

Code Review

by irahardianto in irahardianto/awesome-agv

Structured code review protocol for inspecting code quality against the full rule set.

MITAuto-check passedDevelopment

Install Code Review

skills CLI
$ npx skills add irahardianto/awesome-agv --skill code-review -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install irahardianto/awesome-agv code-review --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/irahardianto/awesome-agv.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/code-review .claude/skills/code-review && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
code-review
GitHub stars
157
Token cost
~2k tokens
SKILL.md length
672 words
Files
13
Skills in repo
34
Repo updated
First seen
Licence
MIT

At a glance

Structured code review protocol for inspecting code quality against the full rule set.

  • Works in 8 steps: Scope the Review → Load the Rule Set → Review Categories (Priority Order) → …
  • Auditing code written by yourself
  • SKILL.md covers Purpose, When to Invoke, Review Process and Rule Compliance, plus 1 more section
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Code Review is an agent skill from irahardianto/awesome-agv. Structured code review protocol for inspecting code quality against the full rule set. Use when auditing code written by yourself or another agent, during the /audit workflow, or when the user asks for a code review.

Its SKILL.md is about 2k tokens, which your agent loads only when the skill is triggered. The skill folder holds 13 other files (for example `languages/cpp.md`, `languages/csharp.md` and `languages/flutter.md`).

It sits in Development, covering Code review and Code quality. The repository describes itself as: Comprehensive sets of standards and practices designed to elevate the capabilities of AI coding agents. The licence is MIT.

When your agent uses it

  • Auditing code written by yourself
  • During the /audit workflow
  • The user asks for a code review

Example prompts

  • “/code-review”

Workflow steps

8 steps, taken from the step headings in SKILL.md.

  1. Scope the Review
  2. Load the Rule Set
  3. Review Categories (Priority Order)
  4. Produce Findings
  5. Save the Report
  6. Severity Tags
  7. Language-Specific Anti-Patterns
  8. Cross-Boundary Checks

What it can do on your machine

Read from SKILL.md and the folder at commit 9e997ba. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are markdown).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Code Review loads about 2k tokens when it runs. Until then it costs about 57 tokens; SKILL.md has 672 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~57
When it runs · the whole SKILL.md, loaded when a task matches
~2k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from irahardianto/awesome-agv at commit 9e997ba, republished under its MIT licence (© irahardianto). 672 words, ~1,954 tokens.

Download SKILL.mdSave it as .claude/skills/code-review/SKILL.md (or your agent's skills folder). This skill also uses 12 other files; get the full folder from GitHub.
name
code-review
description
Structured code review protocol for inspecting code quality against the full rule set. Use when auditing code written by yourself or another agent, during the /audit workflow, or when the user asks for a code review.

Code Review Skill

Purpose

Systematically review code against the full antigravity rule set. Catches issues that linters miss: architectural violations, missing observability, business logic errors, pattern inconsistencies.

When to Invoke

  • During the /audit workflow (as part of parallel subagent dispatch)
  • When user asks for a code review outside any workflow
  • Best practice: Invoke in a fresh conversation (not the same one that authored the code) to avoid confirmation bias

Review Process

1. Scope the Review

Identify the files/features to review. Determine the review scope:

  • Feature review — all files in a feature directory
  • PR review — only changed files
  • Full codebase audit — all features
2. Load the Rule Set

Read all applicable rules from .agents/rules/. Use rule-priority.md for severity classification.

3. Review Categories (Priority Order)

Review each file/feature against these categories, in order from rule-priority.md:

Critical (Must Fix)
  • Security — injection, hardcoded secrets, broken auth
  • Data loss — missing error handling on writes, no transaction boundaries
  • Resource leaks — unclosed connections, missing cleanup
Major (Should Fix)
  • Testability — I/O not behind interfaces, untested error paths
  • Observability — missing logging on operations, no correlation IDs
  • Error handling — empty catch blocks, swallowed errors
  • Architecture — circular dependencies, wrong layer access
Minor (Nice to Fix)
  • Pattern consistency — deviation from established codebase patterns
  • Naming — unclear variable/function names
  • Code organization — functions too long, mixed responsibilities
Enhancement (Backlog)
  • Style — formatting issues or non-critical refactorings
  • Documentation — missing comments on complex logic
4. Produce Findings

Output a structured findings document:

markdown
# Code Review: {Feature/Module Name}
Date: {date}
Reviewer: AI Agent (fresh context)

## Summary
- **Files reviewed:** N
- **Issues found:** N (X critical, Y major, Z minor, W enhancement)

## Critical Issues
- [ ] **[SEC]** {description} — [{file}:{line}](file:///path)
- [ ] **[DATA]** {description} — [{file}:{line}](file:///path)

## Major Issues
- [ ] **[TEST]** {description} — [{file}:{line}](file:///path)
- [ ] **[OBS]** {description} — [{file}:{line}](file:///path)

## Minor Issues
- [ ] **[PAT]** {description} — [{file}:{line}](file:///path)

## Enhancement Issues
- [ ] {description} — [{file}:{line}](file:///path)

## Rules Applied
List of rules referenced during this review.
5. Save the Report

When invoked via the /audit workflow, you MUST persist the findings to the repo:

Path: docs/audits/review-findings-{feature}-{YYYY-MM-DD}-{HHmm}.md

  1. Create docs/audits/ if it doesn't exist
  2. Write the findings document to that path
  3. This makes the report accessible from other conversations and agents

When invoked as a standalone review (not via /audit), saving to docs/audits/ is recommended but optional.

6. Severity Tags
TagCategoryRule Source
[SEC]Securitysecurity-principles.md
[DATA]Data integrityerror-handling-principles.md
[RES]Resource leakresources-and-memory-management-principles.md
[TEST]Testabilityarchitectural-pattern.md, testing-strategy.md
[OBS]Observabilitylogging-and-observability-mandate.md
[ERR]Error handlingerror-handling-principles.md
[ARCH]Architecturearchitectural-pattern.md, project-structure.md
[PAT]Pattern consistencycode-organization-principles.md
[INT]Integration contractapi-design-principles.md
[DB]Database designdatabase-design-principles.md
[CFG]Configurationconfiguration-management-principles.md
[SPEC]Spec compliancestructured-spec profiles
7. Language-Specific Anti-Patterns

Load the anti-pattern checklist for the language(s) under review:

LanguageAnti-Patterns
Golanguages/go.md
TypeScriptlanguages/typescript.md
Pythonlanguages/python.md
Rustlanguages/rust.md
Javalanguages/java.md
C#languages/csharp.md
Swiftlanguages/swift.md
Flutter/Dartlanguages/flutter.md
C++languages/cpp.md
Kotlinlanguages/kotlin.md
PHPlanguages/php.md
Rubylanguages/ruby.md

Anti-patterns listed in language files are auto-fail — they require no judgment call. If the pattern exists in the code, it is a finding.

Show full SKILL.md (262 more words)Show less
8. Cross-Boundary Checks

For full audits, cross-boundary concerns (integration contracts, database schema, configuration hygiene, dependency health, test coverage gaps) are checked via the dedicated MECE dimension scope cards in the /audit workflow (Dimension F & G) — defined in .agents/skills/code-audit/references/audit-dimensions.md.

When invoking this skill standalone (outside /audit), apply the applicable dimensions from that checklist manually and tag findings with [INT], [DB], or [CFG] as appropriate.

When structured specs exist in the repository (files with structured-spec YAML frontmatter), verify that:

  • Contracts declared in specs (CT-*) are implemented in code
  • Tests declared in specs (TC-*) exist and pass
  • No requirement (REQ-*) is unimplemented without documented rationale Tag findings with [SPEC].

Zero-Findings Guard: If this review produces fewer than 3 findings, you MUST produce a "Dimensions Covered" attestation section in the findings document, listing each cross-boundary dimension and the specific files or queries you examined. Only then may you declare a clean result.


Rule Compliance

This skill enforces all rules in .agents/rules/. Key references:

  • Rule Priority @rule-priority.md (severity classification)
  • Security Principles @security-principles.md
  • Architectural Patterns @architectural-pattern.md
  • Testing Strategy @testing-strategy.md
  • Logging and Observability Mandate @logging-and-observability-mandate.md
  • Error Handling Principles @error-handling-principles.md

Quick Reference Audit Checklist

Consolidated from rule-based checklists. Use as a rapid scan after detailed review.

Architecture (from architectural-pattern.md)
  • I/O behind interfaces; pure business logic; dependencies point inward
Database (from database-design-principles.md)
  • Parameterized queries; migrations reversible; indexes documented
Dependencies (from dependency-management-principles.md)
  • Versions pinned; lock file committed; unused deps removed
Git (from git-workflow-principles.md)
  • Conventional commits; no large binaries; .gitignore complete
Monitoring (from monitoring-and-alerting-principles.md)
  • Health endpoint; key metrics instrumented; alerting rules defined
Performance (from performance-optimization-principles.md)
  • No premature optimization; profiling before tuning; budgets defined

© irahardianto, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 12 other files in .agents/skills/code-review of irahardianto/awesome-agv.

  • SKILL.md
  • languages/cpp.md
  • languages/csharp.md
  • languages/flutter.md
  • languages/go.md
  • languages/java.md
  • languages/kotlin.md
  • languages/php.md
  • languages/python.md
  • languages/ruby.md
  • languages/rust.md
  • languages/swift.md
  • languages/typescript.md

Open the folder on GitHubat commit 9e997ba

Compare with similar skills

Code Review next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Code Review compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Code Review this skillirahardianto/awesome-agv157—~2kAutomated safety check: PassMIT
WooCommerce Code Reviewwoocommerce/woocommerce11k3 repos~1.1kAutomated safety check: PassCustom licence
Skill Doli Code ReviewDolibarr/dolibarr7.7k1 repos~1.1kAutomated safety check: PassMIT
Dignified Python Standardsdocling-project/docling69k—~1.5kAutomated safety check: PassApache-2.0
Clean Code GuardamElnagdy/guard-skills1.3k2 repos~4.3kAutomated safety check: PassMIT
Archify Reviewtt-a1i/archify79k—~415Automated safety check: PassMIT

Similar skills

  • WooCommerce Code Review

    woocommerce/woocommerce

    Reviews WooCommerce code changes against the project's standards, flagging backend PHP architecture, naming, documentation, data integrity and testing violations.

    11k GitHub starsUsed in 3 repos~1.1k tokens
    DevelopmentAuto-check passed
  • Skill Doli Code Review

    Dolibarr/dolibarr

    Reviews Dolibarr PHP code for compliance with coding standards and security best practices, and fixes identified issues.

    7.7k GitHub starsUsed in 1 repo~1.1k tokens
    DevelopmentAuto-check passed
  • Dignified Python Standards

    docling-project/docling

    Applies opinionated production Python conventions chosen by the project's Python version: modern type syntax, pathlib, explicit checks and interface guidance.

    69k GitHub stars~1.5k tokensUpdated today
    DevelopmentAuto-check passed
  • Clean Code Guard

    amElnagdy/guard-skills

    Reviews generated or changed production code against Clean Code, SOLID, DRY, KISS, YAGNI and LLM-specific failure modes before it ships, in any language.

    1.3k GitHub starsUsed in 2 repos~4.3k tokens
    DevelopmentAuto-check passed
  • Archify Review

    tt-a1i/archify

    Review Archify issues, PRs, or code through value, cost, and impact to support evidence-based maintenance decisions. Use for issue triage, change reviews, and…

    79k GitHub stars~415 tokensUpdated today
    DevelopmentAuto-check passed
  • Code Review Skill

    awesome-skills/code-review-skill

    Provides comprehensive code review guidance for React 19, Vue 3, Angular 17+, Svelte 5, Rust, TypeScript, Java, Java 8, PHP, Ruby, Rails, Python, Django, FastAPI, Go, C/.NET, Kotlin, Swift, Dart…

    2.1k GitHub stars~2.8k tokensUpdated 1 mo ago
    DevelopmentAuto-check: notes

More from irahardianto/awesome-agv

All 34 skills in this repo
  • Distinctive Frontend Design Builder

    irahardianto/awesome-agv

    Commits to one bold aesthetic direction, sets up a CSS token system for it, then builds the interface in Vue or plain HTML using those tokens.

    157 GitHub stars~2.4k tokensUpdated 3 days ago
    Auto-check passed
  • Perf Optimization

    irahardianto/awesome-agv

    Profile-driven performance optimization protocol. An agent skill from irahardianto/awesome-agv.

    157 GitHub stars~4.3k tokensUpdated 3 days ago
    Auto-check passed
  • Angular Idioms and Patterns

    irahardianto/awesome-agv

    Coding conventions for Angular 19 and later: standalone components, signals, OnPush change detection, lazy routes and where RxJS still belongs.

    157 GitHub stars~3.8k tokensUpdated 3 days ago
    Auto-check passed
  • CI/CD Pipeline Principles

    irahardianto/awesome-agv

    Rules for designing CI/CD pipelines in layers: universal lint, test and scan stages, container builds with SBOM attestation, and GitOps for orchestrated deployments.

    157 GitHub stars~2.7k tokensUpdated 3 days ago
    Auto-check: notes
  • Hono Idioms

    irahardianto/awesome-agv

    Hono lightweight web framework patterns: type-safe route handlers, middleware composition, Zod validation, and RPC clients for Cloudflare Workers, Node, or Bun.

    157 GitHub stars~3k tokensUpdated 3 days ago
    Auto-check passed
  • Mobile Testing

    irahardianto/awesome-agv

    Mobile E2E testing patterns — Flutter integrationtest, Patrol, Maestro, golden testing, device matrix, and test data management.

    157 GitHub stars~1.8k tokensUpdated 3 days ago
    Auto-check: notes

Categories

Questions about Code Review

What does Code Review do?

Structured code review protocol for inspecting code quality against the full rule set. Code Review is an agent skill from irahardianto/awesome-agv. Structured code review protocol for inspecting code quality against the full rule set.

When should I use Code Review?

Code Review fits situations like: auditing code written by yourself; during the /audit workflow; the user asks for a code review.

How do I install Code Review in Claude Code?

Run `npx skills add irahardianto/awesome-agv --skill code-review -a claude-code`. Or copy the skill folder (.agents/skills/code-review in irahardianto/awesome-agv) into .claude/skills/code-review in your project. Claude Code loads it when a task matches its description.

How do I install Code Review in Codex?

Run `npx skills add irahardianto/awesome-agv --skill code-review -a codex`. Or copy the skill folder (.agents/skills/code-review in irahardianto/awesome-agv) into .agents/skills/code-review in your project. Codex loads it when a task matches its description.

Can I use Code Review in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add irahardianto/awesome-agv --skill code-review -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/code-review, .gemini/skills/code-review, .github/skills/code-review and .opencode/skills/code-review in your project.

What does Code Review need to run?

SKILL.md names no scripts, command-line tools or credentials: Code Review is instructions for the agent only.

Does Code Review access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Code Review safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Code Review use?

Code Review is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Code Review use?

About 2k tokens (SKILL.md is roughly 7.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Code Review?

Skills that share tags, products or a category with Code Review: WooCommerce Code Review (woocommerce/woocommerce, 11k stars), Skill Doli Code Review (Dolibarr/dolibarr, 7.7k stars), Dignified Python Standards (docling-project/docling, 69k stars) and Clean Code Guard (amElnagdy/guard-skills, 1.3k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Code Review?

irahardianto (a GitHub user) maintains it in irahardianto/awesome-agv, which has 157 GitHub stars. The repository holds 34 skills in this directory. The repository was last updated on October 5, 2026.

Source: irahardianto/awesome-agv on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.