mhylle/claude-skills-collection/code-review
- community
Checking that the SKILL.md file is still in the repository.
Six-dimension code review of a phase's changes: service delegation, framework standards, ADR compliance, plan sync, coding standards and general quality. Returns a binary PASS or NEEDS_CHANGES verdict with every finding classed BLOCKING, RECOMMENDATION or NOTE. Used by implement-phase as its Step 4 quality gate, or manually to review a set of changes against the project's own standards and ADRs. Invoked as devflow:code-review; Claude Code's built-in /code-review is a different, bug-focused review of the current diff. For a hostile multi-persona review use adversarial-reviewer; for security depth use devflow:security-review.
Install
npx vskill@latest install mhylle/claude-skills-collection/code-reviewSKILL.md
Code Review
<!-- contents: generated by tests/skill_structure.py --write; edit headings, not this block -->
Contents
- Design Philosophy
- When to Use This Skill
- Review Dimensions
- Review Workflow
- Integration with implement-phase
- Invoking the Skill
- Review Checklists
- Severity Levels
- Critical Rule: All Errors Are New Errors
- Best Practices
- Example Review Session
Reference files (open one when a step points to it):
references/adr-compliance-checklist.md: ADR Compliance Checklistreferences/coding-standards-checklist.md: Coding Standards Compliance Checklistreferences/framework-standards-checklist.md: Framework Standards Compliance Checklistreferences/general-quality-checklist.md: General Code Quality Checklistreferences/service-delegation-checklist.md: Service Delegation & Single Responsibility Checklist
<!-- /contents -->
Systematic code review skill that validates implementation quality across six dimensions: service delegation, framework standards, ADR compliance, plan synchronization, coding standards, and general code quality.
Design Philosophy
This skill acts as a quality gate between implementation phases. It ensures code meets established standards before proceeding, catching issues early when they're cheapest to fix.
When to Use This Skill
Automatically invoked by implement-phase (Step 4):
- After the phase passes exit conditions and integration testing (Steps 2–3)
- Before marking a phase as complete
- Before proceeding to the next phase
Manually invoked when:
- Reviewing a PR or set of changes
- Validating code before committing
- Checking implementation against architectural decisions
Review Dimensions
1. Service Delegation & Single Responsibility
Verify that implementation follows proper separation of concerns:
| Check | What to Look For | |
|---|---|---|
| Controller thin | Controllers only handle HTTP concerns, delegate to services | |
| Service focused | Each service has one clear responsibility | |
| No god objects | No classes/modules doing too many things | |
| Dependency direction | Dependencies flow inward (controllers → services → repositories) | |
| No business logic in wrong layer | Controllers don't contain business rules, repositories don't transform data |
2. Framework Standards Compliance
Verify code follows the project's established patterns:
| Check | What to Verify | |
|---|---|---|
| Naming conventions | Files, classes, methods follow project conventions | |
| Module structure | New code follows existing module organization | |
| Error handling | Uses project's error handling patterns | |
| Logging | Follows established logging conventions | |
| Configuration | Uses project's config management approach | |
| Testing patterns | Tests follow existing test structure and naming |
3. ADR Compliance
Verify architectural decisions are followed and documented:
| Check | What to Do | |
|---|---|---|
| Read relevant ADRs | Check INDEX.md, identify ADRs related to this change | |
| Verify compliance | Implementation follows documented decisions | |
| New decisions documented | Any new architectural choices have corresponding ADRs | |
| No contradictions | Changes don't violate existing accepted ADRs |
4. Plan Synchronization
Verify the implementation matches the phase as the plan specifies it. Per ADR-0001 the plan is a specification and progress is tracked outside it, so don't expect ticked checkboxes or status edits in the plan.
| Check | What to Verify | |
|---|---|---|
| Scope delivered | The phase's objective and every work item have matching code and tests | |
| No unplanned scope | Changes outside the phase's described scope are needed by the phase, not unrelated work | |
| Deviations surfaced | Each difference between plan and code is listed with its reason | |
| ADR references | ADRs this phase follows or creates are listed |
The scope comes from the plan file's phase section, or from the phase description and requirements the caller passes. With no plan or phase scope given (a plain manual review), report this dimension as PASS with "No plan given".
A missing work item is BLOCKING. Unplanned work, or a deviation with no evident reason, is a RECOMMENDATION: bring the code back in line with the plan or state the reason. A deviation with a reason, and an ADR reference the plan lacks, are NOTES: implement-phase records both in the plan at Step 6, after this review, so they need not be there yet.
5. General Code Quality
Standard code review concerns:
| Check | What to Look For | |
|---|---|---|
| No security issues | No injection vulnerabilities, proper auth checks | |
| No hardcoded secrets | No API keys, passwords, or tokens in code | |
| Error handling | Errors handled gracefully, not swallowed | |
| Resource cleanup | Connections, streams, handlers properly closed | |
| No dead code | No commented-out code, unused imports/variables | |
| Test coverage | New code has appropriate test coverage | |
| Documentation | Complex logic has explanatory comments |
6. Coding Standards Compliance
Verify implementation follows project coding standards:
| Check | What to Verify | |
|---|---|---|
| File size limits | Services <500 lines, controllers <250 lines (unless the standards file sets its own) | |
| Service delegation | Controllers thin, services focused | |
| Interface usage | DTOs and response types have interfaces (typed languages) | |
| Error handling | Domain exceptions, no swallowed errors | |
| Logging | Project logger used, no debug printing (console.log, print) in production code | |
| Configuration | Via the project's config mechanism (NestJS: ConfigService), no hardcoded values | |
| Forbidden patterns | No empty catch blocks, no unhandled promises |
Source of truth: docs/standards/CODING_STANDARDS.md when it exists. When it doesn't, the project's own conventions are the standard: observe them in neighbouring code (Review Workflow, Step 2) and flag only departures from what that code consistently does. Framework-specific checks in the checklists (marked NestJS, TypeScript, …) apply only when that framework is detected in the project, or when the standards file adopts them.
Review Workflow
Step 1: Gather Context
Step 2: Framework Pattern Analysis
Step 3: Review Each Dimension
Each dimension produces the same block, however it runs:
If `Agent` is in your tool list and the change spans more than a few files, review the dimensions in parallel: send six Agent calls in one message, one per dimension, with subagent_type: "general-purpose". Subagents start without your context, so each prompt carries the changed files, the context from the table below, the path to its checklist in this skill's references/ directory, the Severity Levels table, an instruction not to edit files, and the block above as the required reply. Subagents run in the background; wait for all six completion notifications before writing the report.
| Dimension | Context to pass | Checklist | |
|---|---|---|---|
| Service delegation | Changed files | service-delegation-checklist.md | |
| Framework standards | Changed files, stack and conventions from Step 2 | framework-standards-checklist.md | |
| ADR compliance | Relevant ADR paths from Step 1 | adr-compliance-checklist.md | |
| Plan synchronization | Plan path and phase, or the scope the caller passed | Dimension 4 table above | |
| General code quality | Changed files | general-quality-checklist.md | |
| Coding standards | Changed files, standards file or observed conventions | coding-standards-checklist.md |
Otherwise (no Agent in your tool list, or a change small enough to review in one pass), work through the six dimensions yourself, in order, as a checklist, and produce the same six blocks.
Step 4: Generate Review Report
Output a structured review report. A dimension's Status is NEEDS_CHANGES if it has any BLOCKING or RECOMMENDATION finding; NOTES alone leave it PASS.
Integration with implement-phase
When invoked by implement-phase (Step 4 of the phase pipeline), this skill:
- Receives context: Phase number, changed files, plan path
- Executes review: All six dimensions
- Returns structured result:
This is the start of the file. Read the full SKILL.md on GitHub.
Security
- Security scanPassed, 95 of 100Pattern checks on the skill's files.
- Model reviewPassed
Quality evaluation
- Task evaluationNot runNo evaluation yet. Run one in Skill Studio.
Source
- SKILL.md in the repositoryCheckingskills/code-review/SKILL.md
Popularity
- Repository stars
- 13
- 7-day trend score
- 13
Stars and forks are for the whole GitHub repository, not this skill alone. Refreshed 30 Mar 2026, 6 months ago.
Works with
Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.
- Claude Code
- Cursor
- GitHub Copilot
- Windsurf
- Codex
- Gemini CLI
- Cline
- Amp
- Roo Code
- Goose
- Continue
- Kilo Code
- Junie
- Trae
- OpenHands
- Qwen Code
- AI Agent
- Tabnine Chat
- Sourcegraph Cody
- Amazon Q
- Firebase Genkit
- Sweep
- Devin
- Phind
- Mentat
- Claude Desktop
- Aider
- GPT Pilot
- Plandex
- bolt.new
- v0
- Replit Agent
- Anse
- TypingMind
- BetterChatGPT
- LibreChat
- Warp AI
- Pieces
- Fig AI
Embed badge
[](https://verified-skill.com/skills/mhylle/claude-skills-collection/code-review)