Install
$ agentstack add skill-dominiktobureto-awesome-grok-build-agentic-code-review ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Agentic Code Review
Review like a senior engineer who wants the change to ship safely.
Grok Build Mode
- Use Plan Mode only if the review requires a fix plan. Pure review is read-only.
- Use subagents for independent passes on risky diffs:
correctness: behavior and edge cases.security: auth, permissions, secrets, injection, dependency risk.tests: coverage and missing regression tests.performance: complexity, queries, caching, bundle size.- Arena-style review: if Arena Mode is available, compare independent review outputs and keep only findings with concrete failure paths. Otherwise synthesize subagent findings and dedupe.
- Human-in-the-loop: never auto-apply fixes unless the user explicitly asks. Findings first, fixes after approval.
Review Priority
- Correctness bugs.
- Security and privacy risks.
- Data loss, migrations, auth, payments, permissions, and concurrency.
- Missing or weak tests.
- Performance regressions.
- Developer experience and maintainability.
- Style only when it blocks comprehension or violates repo conventions.
Process
- Read the diff and the surrounding code.
- Identify the intended behavior from the issue, README, tests, or prompt.
- Check whether the implementation actually satisfies that behavior.
- Look for edge cases and failure modes.
- Verify test coverage maps to the risk.
- Run narrow verification only if the user asked for fix validation or the repo has cheap checks.
- Produce findings first. Keep summary short.
Finding Format
Use this format:
[P1] Title
File: path/to/file.ext:line
Problem: ...
Why it matters: ...
Suggested fix: ...
Severity:
P0: must fix before merge, production-breaking or data/security critical.P1: should fix before merge.P2: useful fix, not necessarily blocking.P3: polish or follow-up.
Example Prompts
Use agentic-code-review on the current diff. Findings first. Ignore style unless it creates real risk.
Review this PR with subagents for correctness, security, tests, and performance. Dedupe findings and keep only actionable issues.
Git Best Practices
- Review staged and unstaged changes separately when possible.
- Mention untracked files that affect the change.
- Do not recommend committing until verification is complete.
- If proposing fixes, keep each fix scoped to one finding.
Guardrails
- Do not list style nits as findings unless they create real risk.
- Do not claim a bug without a concrete failure path.
- If the diff is safe, say so and name residual risks or missing verification.
- Prefer references to exact files and lines.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: DominikTobureto
- Source: DominikTobureto/awesome-grok-build
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.