AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Agentic Code Review

skill-dominiktobureto-awesome-grok-build-agentic-code-review · by DominikTobureto

Use when reviewing a diff, pull request, branch, or AI-generated code for correctness, security, regression, test, performance, and maintainability risks before merge.

No reviews yet
0 installs
38 views
0.0% view→install

Install

$ agentstack add skill-dominiktobureto-awesome-grok-build-agentic-code-review

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-dominiktobureto-awesome-grok-build-agentic-code-review)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
3mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Agentic Code Review? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Agentic Code Review

Review like a senior engineer who wants the change to ship safely.

Grok Build Mode

  • Use Plan Mode only if the review requires a fix plan. Pure review is read-only.
  • Use subagents for independent passes on risky diffs:
  • correctness: behavior and edge cases.
  • security: auth, permissions, secrets, injection, dependency risk.
  • tests: coverage and missing regression tests.
  • performance: complexity, queries, caching, bundle size.
  • Arena-style review: if Arena Mode is available, compare independent review outputs and keep only findings with concrete failure paths. Otherwise synthesize subagent findings and dedupe.
  • Human-in-the-loop: never auto-apply fixes unless the user explicitly asks. Findings first, fixes after approval.

Review Priority

  1. Correctness bugs.
  2. Security and privacy risks.
  3. Data loss, migrations, auth, payments, permissions, and concurrency.
  4. Missing or weak tests.
  5. Performance regressions.
  6. Developer experience and maintainability.
  7. Style only when it blocks comprehension or violates repo conventions.

Process

  1. Read the diff and the surrounding code.
  2. Identify the intended behavior from the issue, README, tests, or prompt.
  3. Check whether the implementation actually satisfies that behavior.
  4. Look for edge cases and failure modes.
  5. Verify test coverage maps to the risk.
  6. Run narrow verification only if the user asked for fix validation or the repo has cheap checks.
  7. Produce findings first. Keep summary short.

Finding Format

Use this format:

[P1] Title
File: path/to/file.ext:line
Problem: ...
Why it matters: ...
Suggested fix: ...

Severity:

  • P0: must fix before merge, production-breaking or data/security critical.
  • P1: should fix before merge.
  • P2: useful fix, not necessarily blocking.
  • P3: polish or follow-up.

Example Prompts

Use agentic-code-review on the current diff. Findings first. Ignore style unless it creates real risk.
Review this PR with subagents for correctness, security, tests, and performance. Dedupe findings and keep only actionable issues.

Git Best Practices

  • Review staged and unstaged changes separately when possible.
  • Mention untracked files that affect the change.
  • Do not recommend committing until verification is complete.
  • If proposing fixes, keep each fix scoped to one finding.

Guardrails

  • Do not list style nits as findings unless they create real risk.
  • Do not claim a bug without a concrete failure path.
  • If the diff is safe, say so and name residual risks or missing verification.
  • Prefer references to exact files and lines.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.