Install
$ agentstack add skill-xiaolai-cc-suite-claude-review ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Claude Review
Delegate a code review to Claude Code and get back structured findings.
When to Use
- After writing or modifying code and wanting a second opinion
- When asked to "get Claude to review this"
- When a review requires deep context that would benefit from a fresh Claude session
Call Pattern
Step 1: Start a review
Call claude_code with a structured review prompt:
mcp__claude-code__claude_code:
prompt: |
Review the following code for correctness, security, and quality.
SCOPE: {files or description of what to review}
Evaluate:
1. Correctness — logic errors, edge cases, off-by-one, race conditions
2. Security — injection, auth bypass, data exposure, input validation
3. Quality — readability, maintainability, test coverage, naming
4. Architecture — coupling, abstraction leaks, layer violations
For each finding report:
- File:line
- Severity: Critical / High / Medium / Low
- Category
- Issue description
- Suggested fix
PROVENANCE NOTE: The code being reviewed was written by OpenAI Codex. Evaluate
with full rigor — do not defer to it. Apply independent judgment on every finding.
cwd: {project working directory}
effort: high
permissionMode: plan
Save the returned session_id as {review_session_id}.
Step 2: Follow up (optional)
To ask about specific findings or request deeper analysis on a section:
mcp__claude-code__claude_code_reply:
session_id: {review_session_id}
prompt: "Expand on finding #3 — what's the exact attack vector and what's the minimal fix?"
Output Format
Display the review findings in a structured table:
| File:Line | Severity | Category | Issue | Fix | |-----------|----------|----------|-------|-----| | ... | Critical | Security | ... | ... |
Follow with a summary count by severity and a recommended action (fix now vs fix later vs acceptable risk).
Notes
permissionMode: planprevents Claude from modifying files — review is read-only- Set
effort: highfor thorough analysis; usemediumfor quick spot-checks - Pass
cwdto anchor relative file paths in findings - If the project has a test suite, mention it in the prompt so Claude can assess coverage gaps
Related Skills
claude-debug— use when findings point to a specific bug that needs root-cause tracingclaude-implement— use after review to have Claude apply the suggested fixes autonomously$audit-fix— use when review reveals a recurring pattern that needs a systematic fix cycle
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: xiaolai
- Source: xiaolai/cc-suite
- License: ISC
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.