Git History Bug Audit
ben-manes/caffeine
Audits a module by walking its git history commit by commit, tracking unresolved issues forward, and reporting the ones that survive to HEAD as findings.
收集工作区未提交改动或最近一次提交的 git 变更面，做只读代码审查并给出带文件行号的问题清单。适用：审查改动、检查刚写的代码质量。不修改代码。
Install Code Review
$ npx skills add iZiTTMarvin/Nova-agent --skill code-review -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install iZiTTMarvin/Nova-agent code-review --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/iZiTTMarvin/Nova-agent.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.nova/skills/code-review .claude/skills/code-review && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "code-review" agent skill from https://github.com/iZiTTMarvin/Nova-agent/tree/main/.nova/skills/code-review into .claude/skills/code-review/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "code-review", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/iZiTTMarvin/Nova-agent/tree/main/.nova/skills/code-reviewType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add iZiTTMarvin/Nova-agent --skill code-review -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install iZiTTMarvin/Nova-agent code-review --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/iZiTTMarvin/Nova-agent.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.nova/skills/code-review .agents/skills/code-review && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "code-review" agent skill from https://github.com/iZiTTMarvin/Nova-agent/tree/main/.nova/skills/code-review into .agents/skills/code-review/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "code-review", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add iZiTTMarvin/Nova-agent --skill code-review -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install iZiTTMarvin/Nova-agent code-review --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/iZiTTMarvin/Nova-agent.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.nova/skills/code-review .cursor/skills/code-review && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "code-review" agent skill from https://github.com/iZiTTMarvin/Nova-agent/tree/main/.nova/skills/code-review into .cursor/skills/code-review/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "code-review", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/iZiTTMarvin/Nova-agent.git --path .nova/skills/code-review--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add iZiTTMarvin/Nova-agent --skill code-review -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install iZiTTMarvin/Nova-agent code-review --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/iZiTTMarvin/Nova-agent.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.nova/skills/code-review .gemini/skills/code-review && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "code-review" agent skill from https://github.com/iZiTTMarvin/Nova-agent/tree/main/.nova/skills/code-review into .gemini/skills/code-review/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "code-review", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install iZiTTMarvin/Nova-agent code-reviewInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add iZiTTMarvin/Nova-agent --skill code-review -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/iZiTTMarvin/Nova-agent.git skills-src && mkdir -p .github/skills && cp -r skills-src/.nova/skills/code-review .github/skills/code-review && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "code-review" agent skill from https://github.com/iZiTTMarvin/Nova-agent/tree/main/.nova/skills/code-review into .github/skills/code-review/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "code-review", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add iZiTTMarvin/Nova-agent --skill code-review -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install iZiTTMarvin/Nova-agent code-review --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/iZiTTMarvin/Nova-agent.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.nova/skills/code-review .opencode/skills/code-review && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "code-review" agent skill from https://github.com/iZiTTMarvin/Nova-agent/tree/main/.nova/skills/code-review into .opencode/skills/code-review/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "code-review", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
code-review- GitHub stars
- 175
- Token cost
- ~475 tokens
- SKILL.md length
- 129 words
- Files
- 1
- Skills in repo
- 7
- Repo updated
- First seen
- Licence
- MIT
At a glance
收集工作区未提交改动或最近一次提交的 git 变更面，做只读代码审查并给出带文件行号的问题清单。适用：审查改动、检查刚写的代码质量。不修改代码。
- Works in 3 steps: 确定审查范围（git 事实） → 只读审查 → 组织报告
- Tasks that involve Code review
- SKILL.md covers 上下文, 目标与完成标准, 阶段语义 and 产物落盘, plus 1 more section
- Calls git
What it does
Code Review is an agent skill from iZiTTMarvin/Nova-agent. 收集工作区未提交改动或最近一次提交的 git 变更面，做只读代码审查并给出带文件行号的问题清单。适用：审查改动、检查刚写的代码质量。不修改代码。
Its SKILL.md is about 480 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Development, covering Code review and Git workflow. It works with Git. The repository describes itself as: 最适合新手、懒人、业余开发者使用的本地桌面 Agent，长会话不丢上下文，一句话跑完全流程，无需如何门槛即可完成高质量的开发. The licence is MIT.
When your agent uses it
- Tasks that involve Code review
- Tasks that involve Git workflow
Example prompts
- “/code-review”
Workflow steps
3 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit 216466e. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
git
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md. Its commands use git, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Code Review loads about 475 tokens when it runs. Until then it costs about 21 tokens; SKILL.md has 129 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from iZiTTMarvin/Nova-agent at commit 216466e, republished under its MIT licence (© iZiTTMarvin). 129 words, ~475 tokens.
Download SKILL.mdSave it as
.claude/skills/code-review/SKILL.md (or your agent's skills folder).- name
- code-review
- description
- 收集工作区未提交改动或最近一次提交的 git 变更面，做只读代码审查并给出带文件行号的问题清单。适用：审查改动、检查刚写的代码质量。不修改代码。
- user-invocable
- true
- argument-hint
- [可选：审查焦点]
代码审查
你正在执行 code-review 技能：对当前 git 变更面做只读审查，产出带证据的审查报告。
上下文
- 工作区：<%= workspacePath %>
- 用户请求：${arguments}
目标与完成标准
- 目标：基于真实 diff 与相邻代码，审查正确性、边界、范围、架构、契约、安全与测试覆盖。
- 完成标准：报告已写入工作区；消息流给出自然语言总结（结论、问题清单、优点、未能验证项）。除本技能约定的报告文件外，不修改业务代码、配置与其它文件。
阶段语义
1. 确定审查范围（git 事实）
先确认当前目录是 git 仓库。优先收集工作区未提交改动；工作区干净则回退到最近一次提交。
建议只读命令（按需组合）：
git rev-parse --is-inside-work-treegit status --porcelain（识别未跟踪新文件）git diff --name-only HEAD/git diff --stat HEAD/git diff --unified=3 HEAD- 工作区干净时：对
HEAD~1 HEAD做同样的 diff
若不是 git 仓库，或既无未提交改动也无可比较提交，向用户说明原因并停止，不要臆造范围。
diff 过长时截取概览并标注已截断，再用只读工具补读完整文件。未跟踪文件不在 diff 中，须自行 read。
2. 只读审查
先读项目规则（AGENTS.md 及目录级规则）和被改动文件的相邻代码，再以真实代码为证据审查。
审查维度：
- 正确性与失败路径
- 边界与空值/并发等边缘情况
- 范围是否超出用户意图
- 架构与依赖方向
- 契约与类型一致性
- 安全（注入、密钥、权限）
- 测试是否覆盖新行为
约束：
- 只读：不
edit/write业务文件，不执行会改状态的命令，不向用户提问（范围不清时在报告的「未能验证」中说明）。 - 无法验证的点写入未能验证项，不要臆断。
- 每个问题尽量指出文件与行号，并给出可执行的修改建议。
需要并行加深某个子系统时，可同一轮发多个只读 task；是否并行由你判断。
3. 组织报告
报告须包含：
| 字段 | 含义 |
|---|---|
verdict | pass / conditional / block |
summary | 一句话总评 |
findings | 问题列表：severity（critical/high/medium/low/nit）、file、line、summary、suggestion |
strengths | 做得好的地方 |
unverified | 未能验证、需人工确认的点 |
判定规则（必须遵守）：
- 存在 critical 问题 →
verdict必须为block，即使主观想给 pass。 - 声称
pass但存在 high 问题 → 降为conditional。
产物落盘
- 将完整审查报告写入
<%= workspacePath %>/.nova/reports/（目录不存在则创建），例如code-review-<日期或主题>.md。 - 报告用 markdown：结论、范围说明、问题清单（含严重度与位置）、优点、未能验证项。
- 在消息流用自然语言总结，并给出文件路径；不要把原始 JSON/状态码甩给用户。
约束
- 审查过程只读；唯一允许的写入是本技能的报告文件。
- 不要调用
start_workflow；本能力已是 skill，用invoke_skill或/code-review进入即可。 - 回复使用用户语言（默认简体中文）。
© iZiTTMarvin, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in .nova/skills/code-review of iZiTTMarvin/Nova-agent.
Open the folder on GitHubat commit 216466e
Compare with similar skills
Code Review next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Code Review this skilliZiTTMarvin/Nova-agent | 175 | — | ~475 | Automated safety check: Pass | MIT | |
| Git History Bug Auditben-manes/caffeine | 18k | — | ~3.3k | Automated safety check: Pass | Apache-2.0 | |
| Address PR Feedback for ruby-gitruby-git/ruby-git | 1.8k | — | ~657 | Automated safety check: Pass | MIT | |
| PR Review Triagestickerdaniel/linkedin-mcp-server | 3.8k | — | ~1.4k | Automated safety check: Pass | Apache-2.0 | |
| Beyond Compare Git Diff OpenerSensoriumEmbedded/TeensyROM | 227 | — | ~2.4k | Automated safety check: Pass | MIT | |
| GitHub Workflowtransilienceai/communitytools | 559 | — | ~812 | Automated safety check: Notes | MIT |
Similar skills
Address PR Feedback for ruby-git
ruby-git/ruby-git
Addresses unresolved pull request review threads and suppressed (low-confidence) Copilot review comments on the current branch, folds each fix into the…
PR Review Triage
stickerdaniel/linkedin-mcp-server
Collects every review comment on a pull request, checks each against the real code, fixes the valid ones, pushes, and replies on and resolves each thread.
Beyond Compare Git Diff Opener
SensoriumEmbedded/TeensyROM
Opens Beyond Compare on a git diff for the current work, a pull request, a branch, a commit or a range, without touching the checkout.
GitHub Workflow
transilienceai/communitytools
GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review.
Git CL for Gerrit
webrtc-sdk/webrtc
Provides commands for interacting with Gerrit CLs using git cl, including issue management and non-interactive uploads.
More from iZiTTMarvin/Nova-agent
Nova Frontend
iZiTTMarvin/Nova-agent
Anti-slop, high-craft frontend design: landing pages, brand sites, portfolios, dashboards, product/admin UI, commerce (PDP/PLP/checkout).
Skill Add
iZiTTMarvin/Nova-agent
从 URL 或 zip 安装第三方技能到 ~/.nova/skills 或项目 .nova/skills. An agent skill from iZiTTMarvin/Nova-agent.
Skill Creator
iZiTTMarvin/Nova-agent
交互式创建或优化 Nova Agent 技能（SKILL.md），支持 quick 模式与模板. An agent skill from iZiTTMarvin/Nova-agent.
Deep Research
iZiTTMarvin/Nova-agent
把研究问题拆成子问题后并行只读检索，综合成带来源引用的结论并复核证据。适用：调研主题、技术选型对比、查清事实并给出可追溯结论。不修改代码。
New
iZiTTMarvin/Nova-agent
空白技能脚手架模板，复制后修改 name/description/body 即可使用. An agent skill from iZiTTMarvin/Nova-agent.
Onboard
iZiTTMarvin/Nova-agent
首次启动向导：了解工作区、配置规则与技能，快速上手 Nova Agent
Related
Works with
Categories
Questions about Code Review
What does Code Review do?
收集工作区未提交改动或最近一次提交的 git 变更面，做只读代码审查并给出带文件行号的问题清单。适用：审查改动、检查刚写的代码质量。不修改代码。. Code Review is an agent skill from iZiTTMarvin/Nova-agent.
When should I use Code Review?
Code Review fits situations like: tasks that involve Code review; tasks that involve Git workflow.
How do I install Code Review in Claude Code?
Run `npx skills add iZiTTMarvin/Nova-agent --skill code-review -a claude-code`. Or copy the skill folder (.nova/skills/code-review in iZiTTMarvin/Nova-agent) into .claude/skills/code-review in your project. Claude Code loads it when a task matches its description.
How do I install Code Review in Codex?
Run `npx skills add iZiTTMarvin/Nova-agent --skill code-review -a codex`. Or copy the skill folder (.nova/skills/code-review in iZiTTMarvin/Nova-agent) into .agents/skills/code-review in your project. Codex loads it when a task matches its description.
Can I use Code Review in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add iZiTTMarvin/Nova-agent --skill code-review -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/code-review, .gemini/skills/code-review, .github/skills/code-review and .opencode/skills/code-review in your project.
What does Code Review need to run?
Going by SKILL.md and its folder, Code Review needs the command-line tools its instructions call (git).
Does Code Review access the network?
SKILL.md contains no URLs. Its commands use git, which can reach the network depending on how they are called. This is read from the text; nothing was executed.
Is Code Review safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Code Review use?
Code Review is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Code Review use?
About 475 tokens (SKILL.md is roughly 1.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Code Review?
Skills that share tags, products or a category with Code Review: Git History Bug Audit (ben-manes/caffeine, 18k stars), Address PR Feedback for ruby-git (ruby-git/ruby-git, 1.8k stars), PR Review Triage (stickerdaniel/linkedin-mcp-server, 3.8k stars) and Beyond Compare Git Diff Opener (SensoriumEmbedded/TeensyROM, 227 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Code Review?
iZiTTMarvin (a GitHub user) maintains it in iZiTTMarvin/Nova-agent, which has 175 GitHub stars. The repository holds 7 skills in this directory. The repository was last updated on October 5, 2026.
Source: iZiTTMarvin/Nova-agent on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.