mhylle/claude-skills-collection/code-review

Trust tier 3
  • community
Source check pending

Checking that the SKILL.md file is still in the repository.

Six-dimension code review of a phase's changes: service delegation, framework standards, ADR compliance, plan sync, coding standards and general quality. Returns a binary PASS or NEEDS_CHANGES verdict with every finding classed BLOCKING, RECOMMENDATION or NOTE. Used by implement-phase as its Step 4 quality gate, or manually to review a set of changes against the project's own standards and ADRs. Invoked as devflow:code-review; Claude Code's built-in /code-review is a different, bug-focused review of the current diff. For a hostile multi-persona review use adversarial-reviewer; for security depth use devflow:security-review.

Install

npx vskill@latest install mhylle/claude-skills-collection/code-review

SKILL.md

Code Review

<!-- contents: generated by tests/skill_structure.py --write; edit headings, not this block -->

Contents

Reference files (open one when a step points to it):

  • references/adr-compliance-checklist.md: ADR Compliance Checklist
  • references/coding-standards-checklist.md: Coding Standards Compliance Checklist
  • references/framework-standards-checklist.md: Framework Standards Compliance Checklist
  • references/general-quality-checklist.md: General Code Quality Checklist
  • references/service-delegation-checklist.md: Service Delegation & Single Responsibility Checklist

<!-- /contents -->

Systematic code review skill that validates implementation quality across six dimensions: service delegation, framework standards, ADR compliance, plan synchronization, coding standards, and general code quality.

Design Philosophy

This skill acts as a quality gate between implementation phases. It ensures code meets established standards before proceeding, catching issues early when they're cheapest to fix.

When to Use This Skill

Automatically invoked by implement-phase (Step 4):

  • After the phase passes exit conditions and integration testing (Steps 2–3)
  • Before marking a phase as complete
  • Before proceeding to the next phase

Manually invoked when:

  • Reviewing a PR or set of changes
  • Validating code before committing
  • Checking implementation against architectural decisions

Review Dimensions

1. Service Delegation & Single Responsibility

Verify that implementation follows proper separation of concerns:

CheckWhat to Look For
Controller thinControllers only handle HTTP concerns, delegate to services
Service focusedEach service has one clear responsibility
No god objectsNo classes/modules doing too many things
Dependency directionDependencies flow inward (controllers → services → repositories)
No business logic in wrong layerControllers don't contain business rules, repositories don't transform data
2. Framework Standards Compliance

Verify code follows the project's established patterns:

CheckWhat to Verify
Naming conventionsFiles, classes, methods follow project conventions
Module structureNew code follows existing module organization
Error handlingUses project's error handling patterns
LoggingFollows established logging conventions
ConfigurationUses project's config management approach
Testing patternsTests follow existing test structure and naming
3. ADR Compliance

Verify architectural decisions are followed and documented:

CheckWhat to Do
Read relevant ADRsCheck INDEX.md, identify ADRs related to this change
Verify complianceImplementation follows documented decisions
New decisions documentedAny new architectural choices have corresponding ADRs
No contradictionsChanges don't violate existing accepted ADRs
4. Plan Synchronization

Verify the implementation matches the phase as the plan specifies it. Per ADR-0001 the plan is a specification and progress is tracked outside it, so don't expect ticked checkboxes or status edits in the plan.

CheckWhat to Verify
Scope deliveredThe phase's objective and every work item have matching code and tests
No unplanned scopeChanges outside the phase's described scope are needed by the phase, not unrelated work
Deviations surfacedEach difference between plan and code is listed with its reason
ADR referencesADRs this phase follows or creates are listed

The scope comes from the plan file's phase section, or from the phase description and requirements the caller passes. With no plan or phase scope given (a plain manual review), report this dimension as PASS with "No plan given".

A missing work item is BLOCKING. Unplanned work, or a deviation with no evident reason, is a RECOMMENDATION: bring the code back in line with the plan or state the reason. A deviation with a reason, and an ADR reference the plan lacks, are NOTES: implement-phase records both in the plan at Step 6, after this review, so they need not be there yet.

5. General Code Quality

Standard code review concerns:

CheckWhat to Look For
No security issuesNo injection vulnerabilities, proper auth checks
No hardcoded secretsNo API keys, passwords, or tokens in code
Error handlingErrors handled gracefully, not swallowed
Resource cleanupConnections, streams, handlers properly closed
No dead codeNo commented-out code, unused imports/variables
Test coverageNew code has appropriate test coverage
DocumentationComplex logic has explanatory comments
6. Coding Standards Compliance

Verify implementation follows project coding standards:

CheckWhat to Verify
File size limitsServices <500 lines, controllers <250 lines (unless the standards file sets its own)
Service delegationControllers thin, services focused
Interface usageDTOs and response types have interfaces (typed languages)
Error handlingDomain exceptions, no swallowed errors
LoggingProject logger used, no debug printing (console.log, print) in production code
ConfigurationVia the project's config mechanism (NestJS: ConfigService), no hardcoded values
Forbidden patternsNo empty catch blocks, no unhandled promises

Source of truth: docs/standards/CODING_STANDARDS.md when it exists. When it doesn't, the project's own conventions are the standard: observe them in neighbouring code (Review Workflow, Step 2) and flag only departures from what that code consistently does. Framework-specific checks in the checklists (marked NestJS, TypeScript, …) apply only when that framework is detected in the project, or when the standards file adopts them.

Review Workflow

Step 1: Gather Context
1. READ the plan file to understand:
- Current phase being reviewed
- Expected deliverables (the objective and work items dimension 4 checks against)
- Exit conditions that should be met
2. READ docs/decisions/INDEX.md to identify:
- ADRs relevant to this change
- Recently added ADRs
3. IDENTIFY changed files using git:
- git diff --name-only [base]...HEAD
- Or use provided file list
Step 2: Framework Pattern Analysis
1. DETECT the stack from manifest files (package.json, pyproject.toml, go.mod,
*.csproj, pom.xml, ...). Framework-specific checklist items apply only to
frameworks found here.
2. READ docs/standards/CODING_STANDARDS.md if it exists.
3. FIND the project's conventions for each kind of changed file
(services, controllers, tests, error handling, logging, config):
- Glob for siblings of the same kind (e.g. other *.service.ts in the module)
- Read two or three of them; Grep for the idioms they share
- In a large or unfamiliar codebase, if Agent is in your tool list, spawn an
Explore subagent instead and ask for the conventions with file:line examples
4. COMPARE changed code against identified patterns
Step 3: Review Each Dimension

Each dimension produces the same block, however it runs:

DIMENSION: [name]
STATUS: PASS | NEEDS_CHANGES
FINDINGS:
- [BLOCKING|RECOMMENDATION|NOTE] path:line — issue — fix

If `Agent` is in your tool list and the change spans more than a few files, review the dimensions in parallel: send six Agent calls in one message, one per dimension, with subagent_type: "general-purpose". Subagents start without your context, so each prompt carries the changed files, the context from the table below, the path to its checklist in this skill's references/ directory, the Severity Levels table, an instruction not to edit files, and the block above as the required reply. Subagents run in the background; wait for all six completion notifications before writing the report.

DimensionContext to passChecklist
Service delegationChanged filesservice-delegation-checklist.md
Framework standardsChanged files, stack and conventions from Step 2framework-standards-checklist.md
ADR complianceRelevant ADR paths from Step 1adr-compliance-checklist.md
Plan synchronizationPlan path and phase, or the scope the caller passedDimension 4 table above
General code qualityChanged filesgeneral-quality-checklist.md
Coding standardsChanged files, standards file or observed conventionscoding-standards-checklist.md
Agent(
description="Review: service delegation",
subagent_type="general-purpose",
prompt="Read-only code review; do not edit any file.
Dimension: service delegation & single responsibility.
Files: src/auth/auth.service.ts, src/auth/auth.guard.ts, src/auth/jwt.strategy.ts
Checklist: <absolute path to this skill>/references/service-delegation-checklist.md
Classify each finding BLOCKING, RECOMMENDATION or NOTE: <Severity Levels table>
Reply with only:
DIMENSION: service-delegation
STATUS: PASS | NEEDS_CHANGES
FINDINGS:
- [BLOCKING|RECOMMENDATION|NOTE] path:line — issue — fix"
)

Otherwise (no Agent in your tool list, or a change small enough to review in one pass), work through the six dimensions yourself, in order, as a checklist, and produce the same six blocks.

Step 4: Generate Review Report

Output a structured review report. A dimension's Status is NEEDS_CHANGES if it has any BLOCKING or RECOMMENDATION finding; NOTES alone leave it PASS.

markdown
# Code Review: [Phase/Feature Name]
**Date:** YYYY-MM-DD
**Files Reviewed:** [count]
**Verdict:** PASS | NEEDS_CHANGES
## Summary
[1-2 sentence overall assessment]
## Review Results
### Service Delegation & Single Responsibility
Status: PASS | NEEDS_CHANGES
[Findings or "All checks passed"]
### Framework Standards Compliance
Status: PASS | NEEDS_CHANGES
[Findings or "All checks passed"]
### ADR Compliance
Status: PASS | NEEDS_CHANGES
[Findings or "All checks passed"]
### Plan Synchronization
Status: PASS | NEEDS_CHANGES
[Findings or "All checks passed"]
### General Code Quality
Status: PASS | NEEDS_CHANGES
[Findings or "All checks passed"]
### Coding Standards Compliance
Status: PASS | NEEDS_CHANGES
[Findings or "All checks passed"]
## Required Changes
[Numbered list of every BLOCKING issue and RECOMMENDATION, each tagged with its class, file:line and the fix, or "None"]
## Notes
[Informational findings that don't affect the verdict, or "None"]
## Files Reviewed
| File | Status | Notes |
|------|--------|-------|
| `path/to/file.ts` | OK | |
| `path/to/other.ts` | ISSUE | [Brief note] |

Integration with implement-phase

When invoked by implement-phase (Step 4 of the phase pipeline), this skill:

  1. Receives context: Phase number, changed files, plan path
  2. Executes review: All six dimensions
  3. Returns structured result:
STATUS: PASS | NEEDS_CHANGES
VERDICT: [Brief summary]
CHANGES_REQUIRED: [Count of blocking issues + recommendations; 0 on PASS]
BLOCKING_ISSUES:
- [path:line — issue — fix, or "None"]
RECOMMENDATIONS:
- [path:line — issue — fix, or "None"]
NOTES:
- [Informational items, or "None"]
REPORT: [Path to full review report, if written to disk]

This is the start of the file. Read the full SKILL.md on GitHub.

Security

  • Security scanPassed, 95 of 100Pattern checks on the skill's files.
  • Model reviewPassed

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

Source

Popularity

Repository stars
13
7-day trend score
13

Stars and forks are for the whole GitHub repository, not this skill alone. Refreshed 30 Mar 2026, 6 months ago.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/mhylle/claude-skills-collection/code-review/badge)](https://verified-skill.com/skills/mhylle/claude-skills-collection/code-review)

Something wrong with this skill or its page? Tell us.