Skip to content
Back to skills

Code Review

ASecurity

Review the current diff in one pass.

  • 5 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added October 6, 2026
code-qualitygocode-review

Security analysis

A100/100

Scanned October 6, 2026

npx -y skills add aaronmallen/aaronmallen.me --skill code-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Code Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Code Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/aaronmallen-code-review/badge)](https://www.skillsdirectory.com/skills/aaronmallen-code-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
description: Review the current diff in one pass.
name: code-review
---

# Code review

Read the change once, check it against what it has to do and against this project's rules, and report what is
wrong.

Do not run this on a change that is only mechanical: a rename, a formatting pass, a dependency bump. Say so and
stop.

## 1. Read the current diff

**Always review the current diff. Never ask which revision.**

Read the working change the way [`.claude/vcs.md`][vcs] describes. That is the work in flight, which is what
this skill reviews. Keep the diff, the file list and the log.

Stop if the diff is empty. Say the working copy is clean and stop there.

## 2. Run the gate first

```sh
mise run lint
mise run test
```

**A red gate stops the review.** Report which check failed and stop. A failing build buries real findings under
symptoms of it.

A green gate means anything the linter or the suite would catch is already caught. Do not report it again.

## 3. Review it

Read every changed file in full, not only the hunks. Then check the change against:

- **What it has to do.** The issue or spec it carries out, when there is one. Does it do that for every input it
  will see?
- **This project's rules.** `.claude/CLAUDE.md`, `README.md` and the records in `docs/adr` that cover the area.
- **The code beside it.** A new file looks like the files next to it.

Report only what you can point at: a file, a line and what goes wrong. A finding you cannot tie to a line is a
guess, so leave it out. Behaviour the change never set out to add is a question for the user, not a finding to
fix.

## 4. Report

List each finding with its file and line, what goes wrong, and how bad it is: **blocking** when the change is
wrong or breaks a rule, **advisory** otherwise. Put the worst first.

End with one line: the blocking count and the worst finding.

[vcs]: .claude/vcs.md

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…