Official agent skill

Code Review

by microsoft in microsoft/onnxruntime

Review ONNX Runtime pull requests, branches, commits, patches, and working-tree changes for actionable findings and missing tests.

OfficialMITAuto-check passedDevelopment

Install Code Review

skills CLI
$ npx skills add microsoft/onnxruntime --skill code-review -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install microsoft/onnxruntime code-review --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/microsoft/onnxruntime.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.github/skills/code-review .claude/skills/code-review && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
code-review
GitHub stars
22k
Token cost
~486 tokens
SKILL.md length
243 words
Files
1
Skills in repo
14
Repo updated
First seen
Licence
MIT

At a glance

Review ONNX Runtime pull requests, branches, commits, patches, and working-tree changes for actionable findings and missing tests.

  • Works in 3 steps: Establish the review scope → Analyze changed behavior → Report findings
  • Tasks that involve Code review
  • SKILL.md covers 1. Establish the review scope, 2. Analyze changed behavior and 3. Report findings
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Code Review is an agent skill from microsoft/onnxruntime, published by the product's own GitHub organization. Review ONNX Runtime pull requests, branches, commits, patches, and working-tree changes for actionable findings and missing tests.

Its SKILL.md is about 490 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Development, covering Code review, Deep learning and Pull requests. It works with ONNX. The repository describes itself as: ONNX Runtime: cross-platform, high performance ML inferencing and training accelerator. The licence is MIT.

When your agent uses it

  • Tasks that involve Code review
  • Tasks that involve Deep learning
  • Tasks that involve Pull requests

Example prompts

  • “/code-review”

Workflow steps

3 steps, taken from the step headings in SKILL.md.

  1. Establish the review scope
  2. Analyze changed behavior
  3. Report findings

What it can do on your machine

Read from SKILL.md and the folder at commit 8420709. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Code Review loads about 486 tokens when it runs. Until then it costs about 36 tokens; SKILL.md has 243 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~36
When it runs · the whole SKILL.md, loaded when a task matches
~486

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from microsoft/onnxruntime at commit 8420709, republished under its MIT licence (© microsoft). 243 words, ~486 tokens.

Download SKILL.mdSave it as .claude/skills/code-review/SKILL.md (or your agent's skills folder).
name
code-review
description
Review ONNX Runtime pull requests, branches, commits, patches, and working-tree changes for actionable findings and missing tests.

Reviewing ONNX Runtime Code Changes

Use this workflow for code review.

1. Establish the review scope

Determine the review base before analyzing the change. Identify the exact commits or working-tree state being reviewed, then enumerate all changed files.

If no changed files are found, respond with: "No changes detected. Please specify a commit range, branch, or patch to review."

Read every .github/instructions/**/*.instructions.md file whose applyTo scope matches a changed path. Also load each domain skill whose description matches the changed subsystem or behavior.

If no instructions file or domain skill matches a changed path, proceed using general ONNX Runtime and language-specific conventions.

2. Analyze changed behavior

Review the diff in context, including controlling code, relevant callers, and affected tests. Trace inputs through the changed behavior to externally visible results or failure modes.

Distinguish defects introduced by the change from pre-existing issues.

Ensure coverage of all the following:

  • correctness and security;
  • ABI and API compatibility;
  • memory safety and concurrency;
  • portability across supported platforms and configurations;
  • missing tests for behavior changed by the diff.

Also report actionable clarity and maintainability concerns, even when they are not correctness defects.

Do not report formatting issues already enforced by repository tooling.

3. Report findings

Report each actionable finding separately, using an inline comment when supported. Each finding must include:

  • the file and line where the finding applies;
  • concrete evidence or a triggering scenario;
  • the resulting impact;
  • an actionable correction.

If no actionable findings are found, say so explicitly.

© microsoft, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .github/skills/code-review of microsoft/onnxruntime.

Open the folder on GitHubat commit 8420709

Compare with similar skills

Code Review next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Code Review compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Code Review this skillmicrosoft/onnxruntime22k—~486Automated safety check: PassMIT
PR Reviewpytorch/pytorch104k—~3.6kAutomated safety check: PassCustom licence
Code Reviewnstarman/quax143—~3.2kAutomated safety check: PassApache-2.0
PR Babysitteropeninterpreter/openinterpreter69k3 repos~4.2kAutomated safety check: PassApache-2.0
Understand Diff AnalysisEgonex-AI/Understand-Anything85k1 repos~1.4kAutomated safety check: PassMIT
WooCommerce Code Reviewwoocommerce/woocommerce11k3 repos~1.1kAutomated safety check: PassCustom licence

Similar skills

  • PR Review

    pytorch/pytorch

    Review PyTorch pull requests for code quality, test coverage, security, and backward compatibility.

    104k GitHub stars~3.6k tokensUpdated today
    DevelopmentAuto-check passed
  • Code Review

    nstarman/quax

    A skill your agent uses when reviewing a pull request or diff in the quax repository.

    143 GitHub stars~3.2k tokensUpdated 3 days ago
    DevelopmentAuto-check passed
  • PR Babysitter

    openinterpreter/openinterpreter

    Watches an open GitHub pull request until it merges, handling review comments, diagnosing CI failures and retrying flaky checks along the way.

    69k GitHub starsUsed in 3 repos~4.2k tokens
    DevelopmentAuto-check passed
  • Understand Diff Analysis

    Egonex-AI/Understand-Anything

    Reads your git changes or a pull request against a prebuilt knowledge graph of the project to explain what changed, which components are affected and what is risky.

    85k GitHub starsUsed in 1 repo~1.4k tokens
    DevelopmentAuto-check passed
  • WooCommerce Code Review

    woocommerce/woocommerce

    Reviews WooCommerce code changes against the project's standards, flagging backend PHP architecture, naming, documentation, data integrity and testing violations.

    11k GitHub starsUsed in 3 repos~1.1k tokens
    DevelopmentAuto-check passed
  • Open Code Review CLI

    alibaba/open-code-review

    Runs the ocr command-line tool to review Git changes, a commit or a branch comparison with an AI model, returning line-level comments and optionally applying fixes.

    44k GitHub stars~3.1k tokensUpdated 2 days ago
    DevelopmentAuto-check passed

More from microsoft/onnxruntime

All 14 skills in this repo
  • Official

    Finds and fixes out-of-range output writes in ONNX Runtime operator shape-inference functions where a getNumOutputs guard admits too few outputs.

    22k GitHub stars~3.3k tokensUpdated today
    Auto-check passed
  • Official

    Explains why editing CUTLASS fused-MHA headers in ONNX Runtime can leave stale CUDA kernels after an incremental build, and how to force and verify a real rebuild.

    22k GitHub stars~1.3k tokensUpdated today
    Auto-check passed
  • ONNX Runtime Source Build

    microsoft/onnxruntime

    Official

    Builds ONNX Runtime from source with its build scripts, explaining the update, build and test phases, key flags and where the build output lands.

    22k GitHub stars~1.4k tokensUpdated today
    Auto-check passed
  • ONNX Runtime CI Management

    microsoft/onnxruntime

    Official

    Triggers, re-runs and unblocks the CI checks on an ONNX Runtime pull request, after diagnosing whether a failure is transient or needs a code change.

    22k GitHub stars~4.1k tokensUpdated today
    Auto-check passed
  • ONNX Runtime Release Notes

    microsoft/onnxruntime

    Official

    Drafts ONNX Runtime release notes from commit history and contributor metadata using named presets for the full runtime or a scoped component.

    22k GitHub stars~1.6k tokensUpdated today
    Auto-check passed
  • ONNX Runtime Test Runner

    microsoft/onnxruntime

    Official

    Runs and debugs ONNX Runtime tests: Google Test executables for C++ and unittest or pytest for Python, with filters and build-directory guidance.

    22k GitHub stars~1.8k tokensUpdated today
    Auto-check passed

Works with

Categories

Questions about Code Review

What does Code Review do?

Review ONNX Runtime pull requests, branches, commits, patches, and working-tree changes for actionable findings and missing tests. Code Review is an agent skill from microsoft/onnxruntime, published by the product's own GitHub organization. Review ONNX Runtime pull requests, branches, commits, patches, and working-tree changes for actionable findings and missing tests.

When should I use Code Review?

Code Review fits situations like: tasks that involve Code review; tasks that involve Deep learning; tasks that involve Pull requests.

How do I install Code Review in Claude Code?

Run `npx skills add microsoft/onnxruntime --skill code-review -a claude-code`. Or copy the skill folder (.github/skills/code-review in microsoft/onnxruntime) into .claude/skills/code-review in your project. Claude Code loads it when a task matches its description.

How do I install Code Review in Codex?

Run `npx skills add microsoft/onnxruntime --skill code-review -a codex`. Or copy the skill folder (.github/skills/code-review in microsoft/onnxruntime) into .agents/skills/code-review in your project. Codex loads it when a task matches its description.

Can I use Code Review in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add microsoft/onnxruntime --skill code-review -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/code-review, .gemini/skills/code-review, .github/skills/code-review and .opencode/skills/code-review in your project.

What does Code Review need to run?

SKILL.md names no scripts, command-line tools or credentials: Code Review is instructions for the agent only.

Does Code Review access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Code Review safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Code Review use?

Code Review is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Code Review use?

About 486 tokens (SKILL.md is roughly 1.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Code Review?

Skills that share tags, products or a category with Code Review: PR Review (pytorch/pytorch, 104k stars), Code Review (nstarman/quax, 143 stars), PR Babysitter (openinterpreter/openinterpreter, 69k stars) and Understand Diff Analysis (Egonex-AI/Understand-Anything, 85k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Code Review?

microsoft (a GitHub organization, an official publisher) maintains it in microsoft/onnxruntime, which has 22,029 GitHub stars. The repository holds 14 skills in this directory. The repository was last updated on October 7, 2026.

Source: microsoft/onnxruntime on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.