Review prompts
--- name: security-review description: Review code for security defects. Use before merging changes that touch authentication, authorization, user input, file handling, secrets, or external requests, or when the user asks for a security review. --- # Security Review Find defects an attacker could actually use. A finding without an attacSKILL.md
Security Review Skill
A skill that reviews changes for exploitable defects, follows untrusted input to where it lands, and reports only findings with an attack path.
--- name: accessibility-review description: Audit UI code for accessibility defects against WCAG. Use when building or changing components, forms, modals, or navigation, or when the user asks about accessibility, a11y, screen readers, or keyboard support. --- # Accessibility Review Judge the interface by whether a person can complete thSKILL.md
Accessibility Skill
A skill that audits UI against WCAG by keyboard, semantics, and state, reporting who is blocked rather than listing rule numbers.
--- name: code-review description: Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes; Standards (does the code follow this repo's documented coding standards?) and Spec (does the code match what the originating issue/PRD asked for?). Runs both reviews in parallel sub-agents and reports them side bySKILL.md
Code Review Skill
Review a diff along two axes in parallel subagents (repo standards plus a Fowler code-smell baseline, and spec fidelity) reported side by side.
--- name: requesting-code-review description: Use when completing tasks, implementing major features, or before merging to verify work meets requirements --- # Requesting Code Review Dispatch a code reviewer subagent to catch issues before they cascade. The reviewer gets precisely crafted context for evaluation, never your session's hisSKILL.md
Requesting Code Review Skill
Request review by dispatching a reviewer subagent with SHAs, requirements, and crafted context (never your session history) then triage findings by severity.
--- name: receiving-code-review description: Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation --- # Code Review Reception ## Overview Code review requiSKILL.md
Receiving Code Review Skill
Handle review feedback with technical rigor: 'You're absolutely right!' is forbidden: verify claims against the codebase, push back with reasoning when wrong.