# Neo Code Review

> >

- **Type:** Skill
- **Install:** `agentstack add skill-benknightdark-neo-skills-neo-code-review`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Benknightdark](https://agentstack.voostack.com/s/benknightdark)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Benknightdark](https://github.com/Benknightdark)
- **Source:** https://github.com/Benknightdark/neo-skills/tree/main/skills/neo-code-review
- **Website:** https://neo-blog-iota.vercel.app/

## Install

```sh
agentstack add skill-benknightdark-neo-skills-neo-code-review
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Code Review Specifications

Apply the Reviewer Pattern. Follow this protocol strictly to systematically, objectively, and constructively review the user's code changes.

---

## 1. Perceive Phase

1. **Identify the Input Source**:
   - **Scenario A: Specific files are provided**
     - If the user provides specific file paths or directly attaches code snippets in the conversation, use them as the primary targets for review.
   - **Scenario B: No files are specified but inside a Git repository**
     - If the user asks to "review changes", "review PR", or asks for a review without providing explicit code but the project is a Git repository, **proactively run the helper script** to fetch the changes:
       ```bash
       uv run skills/neo-code-review/scripts/git-diff-reviewer.py
       ```
     - To review only the staging area, append the `--staged` argument.
     - To review a specific commit range, append the `--commit ` argument.
   - **Scenario C: No changes detected and not a Git repository**
     - If no code input is detected and the environment is not a Git repository, gracefully prompt the user: "No code changes detected. Please provide a specific code snippet or file path." and terminate the review.

2. **Identify Programming Languages & Frameworks**:
   - Identify the programming language (e.g., TypeScript, C#, Python) and relevant frameworks in the code changes to apply language-specific style standards in subsequent phases.

---

## 2. Reason Phase

1. **Load the Review Checklist**:
   - Before evaluating any code, **always read** the external review checklist reference:
     [review-checklist.md](file:///Users/ben/Projects/neo-skills/skills/neo-code-review/references/review-checklist.md)
   
2. **Systematically Evaluate Code**:
   - Analyze the code logic deeply and compare it against the checklist dimensions: Correctness, Regression Risk, Security, Performance, Data & Concurrency, Test Gaps, SOLID/Design Principles, Logging/Observability, Maintainability, and Style.
   - Prioritize evidence-backed findings that create concrete behavioral, security, operational, compatibility, or maintainability risk.
   - Filter out **🔴 Critical Issues (Must-fix)** for defects such as requirement breakage, security vulnerabilities, data corruption/loss, broken authorization, severe regressions, or production-impacting reliability failures.
   - Classify lower-risk performance, design, logging, test coverage, readability, and maintainability issues under **🟡 Suggestions** when they have a clear reason and actionable remediation.

---

## 3. Act Phase

Generate a highly structured and elegant Code Review Report in **Traditional Chinese (Taiwan)**. The report must strictly follow this format:

### 🔍 審查摘要 (Summary)
- **整體評估 (Overall Assessment)**: Provide a brief summary and a clear status rating (e.g., "🔴 需要重大修正後合併" (Needs major changes before merging), "🟡 建議修正後合併" (Recommended to fix before merging), "🟢 結構優良，隨時可合併" (Excellent structure, ready to merge)).
- **變更概述 (Change Overview)**: Briefly describe the main purpose and scope of this change.

### 🔴 嚴重問題 (Critical Issues)
*This section must ONLY contain **Must-fix** items (security vulnerabilities, critical logic bugs, or severe flaws that may cause system failure). If none are found, write "無" (None).*
- **[檔案路徑 / 程式碼區段]** (File Path / Code Snippet)
  - **問題描述 (Problem Description)**: Clearly state what the problem is.
  - **嚴重原因 (Severity Reason)**: Explain *why* this is a critical issue and its potential consequences.
  - **修復方案 (Remediation)**: Provide a **concrete corrected code snippet (Code Snippet)** comparing it with the original or showing the fixed version.

### 🟡 改進建議 (Suggestions)
*Includes suggestions for performance optimization, clean code refactoring, edge-case handling, and comment improvements.*
- **[檔案路徑 / 程式碼區段]** (File Path / Code Snippet)
  - **建議事項 (Recommendation)**: How to optimize the code for performance, readability, or maintainability.
  - **推薦做法 (Proposed Fix)**: Provide an optimized code example.

### 🟢 優秀之處 (Praise) (Optional)
- Highlight exceptionally well-written, elegant, highly readable, or well-tested code sections to encourage best practices.

### ❓ 疑問與釐清 (Questions) (Optional)
- Ask objective questions regarding business logic or unexpected implementations to seek clarification from the user.

---

## 4. Communication Guidelines

- **Focus on the Code, not the Coder**: Be constructive, objective, respectful, and humble.
- **Provide Code Snippets**: Always provide a "corrected code example" for identified issues where applicable. Avoid purely theoretical descriptions.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Benknightdark](https://github.com/Benknightdark)
- **Source:** [Benknightdark/neo-skills](https://github.com/Benknightdark/neo-skills)
- **License:** MIT
- **Homepage:** https://neo-blog-iota.vercel.app/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-benknightdark-neo-skills-neo-code-review
- Seller: https://agentstack.voostack.com/s/benknightdark
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.