Skip to content
Back to skills

Code Graph Review

ASecurity

Use BEFORE a commit or change review, when you need to understand "what this N-file change will break": blast radius over the diff, affected execution paths, dead code, architectural hubs/bridges, weak spots, rename with preview. Do not use for code search — CRG is for structural diff analysis, not navigation.

  • 3 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added September 22, 2026
ai-agentsnodecode-reviewgit

Works with

  • mcp

Security analysis

A100/100

Scanned October 6, 2026

npx -y skills add oleg494/coding-kit --skill code-graph-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Code Graph Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Code Graph Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/oleg494-code-graph-review/badge)](https://www.skillsdirectory.com/skills/oleg494-code-graph-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: code-graph-review
description: 'Use BEFORE a commit or change review, when you need to understand "what this N-file change will break": blast radius over the diff, affected execution paths, dead code, architectural hubs/bridges, weak spots, rename with preview. Do not use for code search — CRG is for structural diff analysis, not navigation.'
license: MIT
compatibility: git repo with a built graph (code-review-graph MCP)
metadata:
  version: "4.7.0"
---

# Code graph review: what will the change break

The code-review-graph MCP server answers "what will this N-file change break" — impact/blast radius over the DIFF, dead-code, communities, flows.

## Workflow (order of application)

1. **Changes ready → diagnose first** (lsp): 0 errors before any linter.
2. **Rebuild the graph** — `build_or_update_graph_tool` (incrementally). A stale graph = false analysis.
3. **Run `detect_changes`** — diff → risk score, priorities (what to look at first), test gaps. This is the main review tool.
4. **Assess blast radius** — `get_impact_radius` (BFS depth over the diff), `get_review_context` (code snippets). Ask: "what will the N-file change break".
5. **Check affected flows** — `get_affected_flows`/`list_flows`: which user paths pass through the changed files.
6. **Architecture (if needed)** — `get_hub_nodes` (who is a hub), `get_bridge_nodes` (bridges), `get_surprising_connections`, `get_architecture_overview`, `get_knowledge_gaps`.
7. **Dead code / rename** — `refactor_tool(mode="dead_code")`; `refactor_tool(mode="rename")` → `apply_refactor_tool`.
8. **Verify dead-code false positives via lsp** (`find_references`), don't delete blindly.

## Table: task → tool

| Task | Tool |
|---|---|
| change review (diff → risk → priorities) | `detect_changes` |
| blast radius of an N-file change | `get_impact_radius`, `get_review_context` |
| affected execution paths | `get_affected_flows`, `list_flows` |
| dead code | `refactor_tool(mode="dead_code")` |
| hubs/bridges/unexpected coupling | `get_hub_nodes`, `get_bridge_nodes`, `get_surprising_connections` |
| weak spots | `get_knowledge_gaps`, `get_suggested_questions` |
| rename with preview | `refactor_tool(mode="rename")` → `apply_refactor_tool` |

## Pitfalls

- **dead-code produces false positives** on callback patterns and `Thread(target=...)` — verify via lsp, don't delete blindly.
- The graph builds/updates incrementally: `build_or_update_graph_tool` after changes — otherwise the data is stale.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…