Packs
12 packscurated
Secure Rust Code Review
Installs a pipeline to validate, plan, execute, and enforce a secure Rust code review.
4 skills · pack
curated
Secure Code Review Pipeline
Installs a pipeline to validate, plan, execute, and enforce a secure code review on PRs.
12 skills · pack
curated
Testing & Quality
Testing, TDD, code review, linting and debugging.
25 skills · pack
curated
Secure SQL Review
Installs a pipeline to validate, plan, execute, and enforce a secure SQL code review.
4 skills · pack
curated
Code Security Review Pipeline
Audit code changes for bugs, security flaws, and quality issues before merging.
15 skills · pack
curated
Refactor Code Safely
Restructure code while preserving behavior: confirm tests are green, refactor in small steps, keep tests green, review, and commit.
9 skills · pack
@softnanolab
Softnano Plugins
Shared skills for the SoftNano lab — HPC job monitoring, code review, literature search, DOI lookup, and more
13 skills · pack
@phuryn
AI Shipping
AI Shipping Kit — for PMs and founders accountable for AI-built code. Document a vibe-coded app, audit it for intended-vs-implemented security gaps and performance issues, and produce a reviewer-ready shipping packet.
2 skills · pack
@testdouble
Han Github
GitHub-specific extensions to Han. Provides skills to post code reviews as PR comments, update a PR description with a consistent format, and other GitHub-facing workflows.
3 skills · pack
@keykor
Ship It
Opinionated plan -> ship -> review workflow for Claude Code. Skills: onboard, plan, ship, watch, fix. Reads per-repo config from CLAUDE.md so the same flow works across every repo.
5 skills · pack
@samyakjhaveri
Sam Cc Setup
Portable core of Sam's Claude Code setup: native pre-commit hook enforcement (sentinel gate retired 2026-08-14), on-demand /validate, generic review agents, cross-model Codex review skills, and a /bootstrap-cc-setup skill that writes the always-loaded rules layer plugins cannot ship. For repos NOT bootstrapped by the Loam Copier template - a Loam-rendered project already carries most of this in .c
6 skills · pack
@samyakjhaveri
Business Process
Business process skills (process-optimizer, sop-writer, workflow-mapper, weekly-review). Useful for operational documentation, SOP generation, and workflow analysis. NOT for: software engineering tasks — these target organizational processes, not code.
4 skills · pack
Results for “code-review”
112 skillsgh-address-comments
Finds the open GitHub PR for the current branch and helps address review comments using the gh CLI.
23.3k · bundle
no-code-low-code-agent
Agent profile for evaluate and implement no-code/low-code workflows, forms, automations, Airtable/Sheets/Zapier-like patterns. Use when Codex needs a specialist agent perspective for planning, implementation, review, debugging, validation, or handoff in this domain.
1 · bundle
gh-address-comments
Finds the open GitHub PR for the current branch and helps address review comments using the gh CLI.
66.9k · bundle
backend-security-coder
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
23
claude-code
Delegate coding tasks to Claude Code (Anthropic's CLI agent). Use for building features, refactoring, PR reviews, and iterative coding. Requires the claude CLI installed.
0 · bundle
codex-deepseek-paper-protocol
Protocol-level two-agent paper writing workflow. Use when the user wants Codex to plan and review from global context while DeepSeek writes or revises the manuscript through the global deepseek-agent skill, with muxing-style-review used for explicit prose style checks.
2 · bundle
codex
Provides Codex CLI delegation workflows for complex code generation and development tasks using OpenAI's GPT-5.3-codex models, including English prompt formulation, execution flags, sandbox modes, and safe result handling. Use when the user explicitly asks to use Codex for complex programming tasks such as code generation, refactoring, or architectural analysis. Triggers on "use codex", "delegate to codex", "run codex cli", "ask codex", "codex exec", "codex review".
3 · bundle
review
Run a standard Claude Code review of local git changes in this repository. Args: --wait, --background, --base <ref>, --scope <auto|working-tree|branch>, --model <model>, --effort <low|medium|high|xhigh|max>. Defaults to opus + xhigh effort. Use as the default path for ordinary code-review requests when the user did not explicitly ask for stronger adversarial scrutiny or for Claude to own the implementation work.
0 · bundle
dmux-workflows
Orchestrates parallel AI agent sessions using dmux, a tmux pane manager, with patterns for research, implementation, testing, and code review across multiple harnesses.
0
mobile-security-coder
Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns. Use PROACTIVELY for mobile security implementations or mobile security code reviews.
23
orch-add-feature
Orchestrates building a new feature end-to-end by delegating research, planning, TDD implementation, review, and gated commit to specialized agents.
226k
architect-review
Master software architect specializing in modern architecture patterns, clean architecture, microservices, event-driven systems, and DDD. Reviews system designs and code changes for architectural integrity, scalability, and maintainability. Use PROACTIVELY for architectural decisions.
23
api-platform-agent
Agent profile for review API platform contracts, versioning, auth, rate limits, SDK clients, and developer experience. Use when Codex needs a specialist agent perspective for planning, implementation, review, debugging, validation, or handoff in this domain.
1 · bundle
finance-billing-agent
Agent profile for review pricing, invoices, subscriptions, entitlements, revenue logic, tax-sensitive flows, and billing UX. Use when Codex needs a specialist agent perspective for planning, implementation, review, debugging, validation, or handoff in this domain.
1 · bundle
prompt-security-agent
Agent profile for review prompt injection, tool boundaries, untrusted content, data exfiltration, and human approval gates. Use when Codex needs a specialist agent perspective for planning, implementation, review, debugging, validation, or handoff in this domain.
1 · bundle
audit-security
Static OWASP review of app code (injection, headers, deps). Use when "review security" or "check vulnerabilities". Session/route×gate/getSession → audit-auth-flows. Plan-only burndown → plan-security-audit. Table RLS → plan-rls-audit. LLM attacks → audit-llm-security.
8
muxing-style-review
21-rule prose review workflow for technical and academic Markdown/LaTeX excerpts. Use when the user asks for muxing-style-review, wants a complete agent-style check combining check-human.md with agent-style audit-only evidence, wants a compact-rule check, wants a DeepSeek/Codex manuscript draft checked for clarity, evidence, citation discipline, terminology, AI-tell prose, or wants an A/B draft comparison. Prefer a dedicated review subagent when available for non-trivial reviews. Use the sibling style-review skill for the upstream post-hoc audit/polish workflow.
2 · bundle
code
Use BEFORE generating, refactoring, reviewing, or debugging code. Trigger phrases include "write a function/script/class for X", "review this code/diff/PR", "refactor this", "debug this error", "is this implementation correct", "what's wrong with this code", "improve this code", "translate from X to Y", or any prompt with a code block the user wants you to act on. Also fires when planning architectural changes, picking algorithms or data structures, or evaluating dependency upgrades. Calls the code MCP tool to retrieve an engineering scaffold (failure pattern, procedure, correct-pattern example, verification step) before generating. Catches hallucinated APIs, lost edge cases, premature algorithm commitment, silent contract violations, refactors that change behavior masked by passing tests. Do NOT trigger for pure code reading with no action requested, simple syntax questions, file...
2 · bundle
skill-improver
Iteratively improve a Claude Code skill using the skill-reviewer agent until it meets quality standards. Use when improving a skill with multiple quality issues, iterating on a new skill until it meets standards, or automated fix-review cycles instead of manual editing.
7
agent-core-review
Use ONLY for code review and test write/review guidance in `packages/agent-core-v2` (the DI × Scope agent engine). Does NOT apply to the legacy `packages/agent-core` or to any other package — for those, do not load this skill. Groups the review and testing lenses used for agent-core-v2 — `slop` (single-level-of-abstraction / layered error-handling review, invoked only on explicit request) and `test` (contract-driven per-test rules for both authoring and reviewing tests). Apply the sub-skill that matches the task; do not apply `slop` unprompted.
14
codex-orchestrate
Orchestrate a fleet of parallel `codex exec` workers with you (Claude Code) as the supervisor — spawn one per isolated git worktree, dispatch headless, verify each INDEPENDENTLY, PR/merge. The manual "codex-ultracode" pattern for fanning out real implementation, research, or review work onto Codex. Bakes in the hard gotchas (stdin blocking, background tracking, don't-trust-self-reports, writer isolation). Triggers on — orchestrate codex, codex workers, codex fleet, spawn codex, delegate to codex in parallel, manual ultracode, 开 codex 小弟, 派 codex worker — NOT for a single cross-vendor opinion (use the `second-opinion-codex` agent), NOT for web-UI worker decomposition (use `/orchestrate`).
8 · bundle
github-copilot-prompt-files
Create, review, and debug GitHub Copilot reusable prompt files and slash commands in Visual Studio Code.
0 · bundle
agent-watchdog
Watch, audit, and fix another agent's work by reconstructing the original request, inspecting evidence, and reporting gaps.
3.4k · bundle
unified-ai-system-gateway
Enhances plain-language requests into structured, reviewable prompts and inspects a self-hosted MCP gateway with provider-free defaults.
28
karpathy-guidelines
Behavioral guidelines to reduce common LLM coding mistakes. Use when writing, reviewing, or refactoring code to avoid overcomplication, make surgical changes, surface assumptions, and define verifiable success criteria.
28 · bundle
deepseek-agent
Call a DeepSeek-backed OpenCode agent as a separate critique, writing, or revision agent from Codex. Use when Codex needs to delegate adversarial research critique, novelty skepticism, method review, manuscript prose, LaTeX section drafting, academic text revision, or paper-writing feedback loops to DeepSeek.
2 · bundle
github-copilot-plugins
Use for designing, creating, reviewing, or packaging GitHub Copilot and Agent Plugins for Visual Studio Code, including plugin.json, portable skills, MCP components, client-specific agents, commands, and hooks. Do not use for a single standalone skill, ordinary VS Code extensions, or installing an unreviewed plugin.
0 · bundle
coding-agent
Delegate coding tasks to Codex, Claude Code, or Pi agents via background process. Use when: (1) building/creating new features or apps, (2) reviewing PRs (spawn in temp dir), (3) refactoring large codebases, (4) iterative coding that needs file exploration. NOT for: simple one-liner fixes (just edit), reading code (use read tool), thread-bound ACP harness requests in chat (for example spawn/run Codex or Claude Code in a Discord thread; use sessions_spawn with runtime:"acp"), or any work in ~/clawd workspace (never spawn agents here). Claude Code: use --print --permission-mode bypassPermissions (no PTY). Codex/Pi/OpenCode: pty:true required.
9
b0
Delegates tasks to specialized AI agents running in parallel via the Box0 platform, enabling code review, security checks, research, and documentation.
81 · bundle
test-anti-patterns
Audits test files for anti-patterns and quality issues, producing a severity-ranked report across multiple languages and frameworks.
4k
slang-shader-engineer
Write, review, refactor, and optimize Slang shader code for graphics, compute, tessellation, and ray tracing pipelines with cross-compilation support.
36.2k · bundle
stata-data-audit
Audit datasets for structure, missingness, labeling, suspicious values, duplicate identifiers, and documentation readiness. Use when a researcher asks for data QA, codebook review, sanity checks, or pre-analysis cleanup guidance.
1k · bundle
dali-dynamic-mode
Write, review, and migrate code using NVIDIA DALI's imperative dynamic-mode API for efficient data loading and preprocessing.
2.2k · bundle
agent-self-evaluation
Rates an agent's own output on five axes — accuracy, completeness, clarity, actionability, conciseness — producing a structured scorecard with evidence and improvement suggestions.
226k · bundle
health
Runs a budget-aware agent-assisted engineering health audit for instruction/config drift, hooks/MCP, verifier surfaces, and AI maintainability. Use when users ask in any language to audit Claude, Codex, Pi, agent instructions, MCP or hooks, verifier coverage, or AI-maintainability drift. Not for debugging application code or reviewing PRs.
0 · bundle
grade-tests
Grades individual test methods and produces a compact markdown table with a letter grade, score band, and one-line note for each test.
4k