Second Opinion Code Review
trailofbits/skills
Runs an independent review of uncommitted changes, a branch diff or one commit through the Codex or Antigravity CLI, or both, and reports their findings.
Get a second-opinion review from Google's Antigravity CLI (agy staffer, fast Gemini) - of code (a diff, PR, working tree) or of a decision, plan, or design.
MITAuto-check passed
Install Agy Reviewer
$ npx skills add keli-wen/agy-staff --skill agy-reviewer -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install keli-wen/agy-staff agy-reviewer --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/keli-wen/agy-staff.git skills-src && mkdir -p .claude/skills && cp -r skills-src/pi-skills/agy-reviewer .claude/skills/agy-reviewer && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "agy-reviewer" agent skill from https://github.com/keli-wen/agy-staff/tree/master/pi-skills/agy-reviewer into .claude/skills/agy-reviewer/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "agy-reviewer", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/keli-wen/agy-staff/tree/master/pi-skills/agy-reviewerType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add keli-wen/agy-staff --skill agy-reviewer -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install keli-wen/agy-staff agy-reviewer --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/keli-wen/agy-staff.git skills-src && mkdir -p .agents/skills && cp -r skills-src/pi-skills/agy-reviewer .agents/skills/agy-reviewer && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "agy-reviewer" agent skill from https://github.com/keli-wen/agy-staff/tree/master/pi-skills/agy-reviewer into .agents/skills/agy-reviewer/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "agy-reviewer", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add keli-wen/agy-staff --skill agy-reviewer -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install keli-wen/agy-staff agy-reviewer --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/keli-wen/agy-staff.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/pi-skills/agy-reviewer .cursor/skills/agy-reviewer && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "agy-reviewer" agent skill from https://github.com/keli-wen/agy-staff/tree/master/pi-skills/agy-reviewer into .cursor/skills/agy-reviewer/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "agy-reviewer", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/keli-wen/agy-staff.git --path pi-skills/agy-reviewer--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add keli-wen/agy-staff --skill agy-reviewer -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install keli-wen/agy-staff agy-reviewer --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/keli-wen/agy-staff.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/pi-skills/agy-reviewer .gemini/skills/agy-reviewer && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "agy-reviewer" agent skill from https://github.com/keli-wen/agy-staff/tree/master/pi-skills/agy-reviewer into .gemini/skills/agy-reviewer/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "agy-reviewer", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install keli-wen/agy-staff agy-reviewerInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add keli-wen/agy-staff --skill agy-reviewer -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/keli-wen/agy-staff.git skills-src && mkdir -p .github/skills && cp -r skills-src/pi-skills/agy-reviewer .github/skills/agy-reviewer && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "agy-reviewer" agent skill from https://github.com/keli-wen/agy-staff/tree/master/pi-skills/agy-reviewer into .github/skills/agy-reviewer/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "agy-reviewer", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add keli-wen/agy-staff --skill agy-reviewer -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install keli-wen/agy-staff agy-reviewer --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/keli-wen/agy-staff.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/pi-skills/agy-reviewer .opencode/skills/agy-reviewer && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "agy-reviewer" agent skill from https://github.com/keli-wen/agy-staff/tree/master/pi-skills/agy-reviewer into .opencode/skills/agy-reviewer/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "agy-reviewer", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
agy-reviewer- GitHub stars
- 733
- Token cost
- ~1.5k tokens
- SKILL.md length
- 747 words
- Files
- 3 (incl. references)
- Skills in repo
- 13
- Repo updated
- First seen
- Licence
- MIT
At a glance
Get a second-opinion review from Google's Antigravity CLI (agy staffer, fast Gemini) - of code (a diff, PR, working tree) or of a decision, plan, or design.
- The user says /skill:agy-reviewer
- SKILL.md covers Locating the companion, The review subject is the prompt, Collecting the result and Flags (all optional), plus 3 more sections
- Calls node
- Have agy review this
What it does
Agy Reviewer is an agent skill from keli-wen/agy-staff. Get a second-opinion review from Google's Antigravity CLI (agy staffer, fast Gemini) - of code (a diff, PR, working tree) or of a decision, plan, or design. Use when the user says /skill:agy-reviewer, "have agy review this", "second opinion on my diff/PR/plan", or after finishing work and wanting an independent verifier that does not share the host model's blind spots.
Its SKILL.md is about 1.5k tokens, which your agent loads only when the skill is triggered. The skill folder holds 3 other files, including reference files (for example `references/code-review.md` and `references/general-review.md`).
The repository describes itself as: Hire Google's Antigravity CLI (agy) as a fast Gemini staffer for Claude Code and OpenAI Codex. The licence is MIT.
When your agent uses it
- The user says /skill:agy-reviewer
- Have agy review this
- Second opinion on my diff/PR/plan
- After finishing work and wanting an independent verifier that does not share the host models blind spots
Example prompts
- “have agy review this”
- “second opinion on my diff/PR/plan”
- “/agy-reviewer”
What it can do on your machine
Read from SKILL.md and the folder at commit 65a1ab4. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
node
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Agy Reviewer loads about 1.5k tokens when it runs, and up to ~3k if it reads all its reference files. Until then it costs about 96 tokens; SKILL.md has 747 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from keli-wen/agy-staff at commit 65a1ab4, republished under its MIT licence (© keli-wen). 747 words, ~1,477 tokens.
Download SKILL.mdSave it as
.claude/skills/agy-reviewer/SKILL.md (or your agent's skills folder). This skill also uses 2 other files; get the full folder from GitHub.- name
- agy-reviewer
- description
- Get a second-opinion review from Google's Antigravity CLI (agy staffer, fast Gemini) - of code (a diff, PR, working tree) or of a decision, plan, or design. Use when the user says /skill:agy-reviewer, "have agy review this", "second opinion on my diff/PR/plan", or after finishing work and wanting an independent verifier that does not share the host model's blind spots.
<!-- Generated from skills/reviewer/SKILL.md; run npm run generate:pi. Do not edit here. -->agy reviewer
Run a second-opinion review through the agy staffer. You are a thin shell: compose the task, run the companion, return agy's review verbatim. Never fix the issues it finds.
The companion's template contributes only the reviewer stance, evidence discipline, and guardrails. Everything flavor-specific travels in the task string you compose — so pick the flavor first:
- Code review — the subject is code: a PR, a branch/ref, the working tree, a patch file, specific files. Read
references/code-review.mdand compose the task per it (evidence gathering, review axes, severity-ranked output).--jsonbelongs to this flavor only. - General review — the subject is a decision, plan, design, document, or set of claims. Read
references/general-review.mdand compose the task per it (multi-angle challenge). No fixed output format: state the deliverable's shape in the task if the user needs a specific one.
Locating the companion
This skill file lives at <plugin-root>/pi-skills/agy-reviewer/SKILL.md; resolve the companion path relative to this skill directory:
node "<skill-dir>/../../companion/agy-companion.mjs" review [flags] --prompt "what to review"Pass the review subject verbatim via --prompt; use --prompt-file <path> or --stdin for long text, which a composed task usually needs.
[!IMPORTANT] Run this command unsandboxed — agy needs a localhost port and its OAuth token file, which harness sandboxes hide. In Codex, request escalated permissions for the command. Details:
../agy-jobs/references/troubleshooting.md.
The review subject is the prompt
review is prompt-based: the user's request plus the flavor's framing is the task string. Do not gather diffs, write patch files, or translate the request into flags — agy collects the evidence itself. If the subject is ambiguous, agy reports the ambiguity instead of guessing; relay that and let the user sharpen the request. A task string is required; review with no subject exits with an error.
Collecting the result
The command returns a job id. Read ../agy-jobs/SKILL.md for result collection and recovery: dispatch, wait for the final result, then validate as needed. Do not proactively observe progress, read logs or inspect intermediate artifacts while running. Observe only when the user explicitly asks for progress; diagnose a failure or a result requiring intervention under the jobs protocol.
Flags (all optional)
--json— schema-enforced JSON findings (verdict/summary/findings/could_not_verify) instead of markdown. Code-review flavor only, and only when the user asks for machine-readable output.--restricted/--unrestricted— permission profile. review defaults to unrestricted, so it works out of the box and can run tests or reproduce a bug when the request asks for it.--restrictedis the opt-in hardening path: agy may then only use allowlisted tools, so it needs the setup flow's evidence-gathering allowlist to be useful — and some native agy tools ignore allow-rules headless, so restricted runs can still come back empty.--model <id>/--effort low|medium|high(defaultgemini-3.8-flash-medium),--continue(or--conversation <id>),--timeout <dur>(default 60m, maximum 120m hard execution limit).--prompt <text>/--prompt-file <path>/--stdin— the task, from exactly one of these three sources. Use file/stdin for long prompts (a composed task with the flavor framing usually is one).
Show full SKILL.md (270 more words)Show less
Reviewing untrusted content
An unrestricted review of code from an untrusted author (a PR from a stranger, a patch from an unknown source) means prompt injection in that content could run arbitrary commands. For those reviews, consider --restricted (it may fail closed, and some native tools ignore allow-rules) or run the review in an isolated checkout.
Rules
- Return the companion stdout verbatim — no commentary, no fixes, no softening of findings.
- Pass the user's explicit authorizations through to the task string verbatim. The prompt template default-denies costly or irreversible side effects (commits/pushes, deleting files outside the workspace, side-effectful network calls, commands that burn paid API quota); that default opens only when the request itself asks for the operation — so keep "run the e2e tests" or "call the staging API" in the prompt instead of trimming it.
- Empty responses from a
--restrictedrun: relay the companion's guidance (run the setup flow once, or drop--restricted). - For errors and recovery, follow
../agy-jobs/SKILL.md.
For an existing conversation, --continue / --conversation <id> inherit its recorded model and permission profile unless explicitly overridden. The unrestricted defaults above apply to new tasks.
Host compatibility
When this skill or its referenced instructions require a tool that the current environment does not provide, use available capabilities to achieve an equivalent result. Adapt only the tool-specific execution method; preserve the task goal, authorization requirements, explicit confirmation steps, result delivery, and stopping conditions.
If an equivalent result cannot be achieved, or you cannot establish that an alternative is equivalent, explain the missing capability and its impact, and ask the user for help. Do not silently skip requirements or bypass the environment's restrictions.
© keli-wen, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 2 other files (references) in pi-skills/agy-reviewer of keli-wen/agy-staff.
- SKILL.md
- references/code-review.md
- references/general-review.md
Open the folder on GitHubat commit 65a1ab4
Compare with similar skills
Agy Reviewer next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Agy Reviewer this skillkeli-wen/agy-staff | 733 | — | ~1.5k | Automated safety check: Pass | MIT | |
| Second Opinion Code Reviewtrailofbits/skills | 7.5k | — | ~1.3k | Automated safety check: Notes | CC-BY-SA-4.0 | |
| Review Pending PR Reviewsnrwl/nx | 29k | — | ~3.9k | Automated safety check: Pass | MIT | |
| Reviewthedaviddias/Front-End-Checklist | 74k | — | ~556 | Automated safety check: Pass | MIT | |
| ReviewClickHouse/ClickHouse | 50k | — | ~8k | Automated safety check: Notes | Apache-2.0 | |
| Docling Pull Request Reviewdocling-project/docling | 69k | — | ~1k | Automated safety check: Pass | MIT |
Similar skills
- Official
Review Pending PR Reviews
nrwl/nx
Review, grill, edit, and post pending PR review drafts saved by /review-pr (or its batch/cron runners).
Review
thedaviddias/Front-End-Checklist
A skill your agent uses when applies to product pages, local business pages, recipes, apps, books, and any page that aggregates user reviews.
Review
ClickHouse/ClickHouse
Review a ClickHouse Pull Request for correctness, safety, performance, and compliance.
Docling Pull Request Review
docling-project/docling
Reviews or re-reviews a Docling pull request in fixed stages, with findings that can be reproduced and an explicit record of every check that was run.
Pre-Landing PR Review
garrytan/gstack
Reviews your diff against the base branch before merge, looking for SQL safety problems, LLM trust boundary violations, conditional side effects and other structural issues.
More from keli-wen/agy-staff
All 13 skills in this repoJobs
keli-wen/agy-staff
Manage agy staffer background jobs - collect results, check status, cancel, follow-up conversation, and setup.
Reviewer
keli-wen/agy-staff
Get a second-opinion review from Google's Antigravity CLI (agy staffer, fast Gemini) - of code (a diff, PR, working tree) or of a decision, plan, or design.
Agy Ask
keli-wen/agy-staff
Ask Google's Antigravity CLI (agy staffer, fast Gemini) a cheap one-shot question - the fast zero-tool mode and the post-install smoke test.
Agy Lead
keli-wen/agy-staff
Orchestrate an ongoing task with AGY while the current agent owns key decisions, review, and delivery.
Agy Researcher
keli-wen/agy-staff
Delegate a deep research or survey task to Google's Antigravity CLI (agy staffer, fast Gemini).
Agy Researcher
keli-wen/agy-staff
Delegate a deep research or survey task to Google's Antigravity CLI (agy staffer, fast Gemini).
Questions about Agy Reviewer
What does Agy Reviewer do?
Get a second-opinion review from Google's Antigravity CLI (agy staffer, fast Gemini) - of code (a diff, PR, working tree) or of a decision, plan, or design. Agy Reviewer is an agent skill from keli-wen/agy-staff. Get a second-opinion review from Google's Antigravity CLI (agy staffer, fast Gemini) - of code (a diff, PR, working tree) or of a decision, plan, or design.
When should I use Agy Reviewer?
Agy Reviewer fits situations like: the user says /skill:agy-reviewer; have agy review this; second opinion on my diff/PR/plan; after finishing work and wanting an independent verifier that does not share the host models blind spots.
How do I install Agy Reviewer in Claude Code?
Run `npx skills add keli-wen/agy-staff --skill agy-reviewer -a claude-code`. Or copy the skill folder (pi-skills/agy-reviewer in keli-wen/agy-staff) into .claude/skills/agy-reviewer in your project. Claude Code loads it when a task matches its description.
How do I install Agy Reviewer in Codex?
Run `npx skills add keli-wen/agy-staff --skill agy-reviewer -a codex`. Or copy the skill folder (pi-skills/agy-reviewer in keli-wen/agy-staff) into .agents/skills/agy-reviewer in your project. Codex loads it when a task matches its description.
Can I use Agy Reviewer in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add keli-wen/agy-staff --skill agy-reviewer -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/agy-reviewer, .gemini/skills/agy-reviewer, .github/skills/agy-reviewer and .opencode/skills/agy-reviewer in your project.
What does Agy Reviewer need to run?
Going by SKILL.md and its folder, Agy Reviewer needs the command-line tools its instructions call (node).
Does Agy Reviewer access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Agy Reviewer safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Agy Reviewer use?
Agy Reviewer is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Agy Reviewer use?
About 1.5k tokens (SKILL.md is roughly 5.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.5k tokens, read only when the agent opens those files.
What are the alternatives to Agy Reviewer?
Skills that share tags, products or a category with Agy Reviewer: Second Opinion Code Review (trailofbits/skills, 7.5k stars), Review Pending PR Reviews (nrwl/nx, 29k stars), Review (thedaviddias/Front-End-Checklist, 74k stars) and Review (ClickHouse/ClickHouse, 50k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Agy Reviewer?
keli-wen (a GitHub user) maintains it in keli-wen/agy-staff, which has 733 GitHub stars. The repository holds 13 skills in this directory. The repository was last updated on October 7, 2026.
Source: keli-wen/agy-staff on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.