Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Requesting Code Review

ASecurity

Use after completing major functionality, before merging, or when a pull request has new commits, automated findings, or unresolved review threads.

15 stars
0 votes
0 copies
0 views
Added 9/28/2026
ai-agentspythonbashreactrefactoringcode-reviewgitapi

Works with

cliapi

Security Analysis

A100/100

Scanned 9/28/2026

Install to Claude Code

$npx -y skills add AidALL/ghost-alice --skill requesting-code-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Requesting Code Review?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Requesting Code Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/aidall-requesting-code-review/badge)](https://www.skillsdirectory.com/skills/aidall-requesting-code-review)

More formats (shields.io, HTML) on the badges page.

Files
SKILL.md
---
name: requesting-code-review
description: Use after completing major functionality, before merging, or when a pull request has new commits, automated findings, or unresolved review threads.
compatibility:
  - "Python 3.11+ standard library"
---

# Requesting Code Review

Dispatch the `code-reviewer` subagent to catch issues before they accumulate. The reviewer receives only the context prepared for evaluation. It never receives the session history. This keeps the reviewer focused on the work output rather than on your thought process, and preserves your own context for follow-up work.

○ Core principle: review early, review often
## Contents

- [When to Request a Review](#when-to-request-a-review)
- [How to Request](#how-to-request)
- [Remote Pull Request Review Gate](#remote-pull-request-review-gate)
- [Example](#example)
- [Workflow Integration](#workflow-integration)
- [Red Flags](#red-flags)


## When to Request a Review

□ Required

- After each task in subagent-driven-development
- After completing major functionality
- Before merging to main

□ Optional but valuable

- When stuck (a fresh perspective)
- Before refactoring (a baseline check)
- After fixing a complex bug

## How to Request

□ 1. Capture the git commit hashes

```bash
BASE_SHA=$(git rev-parse HEAD~1)  # or origin/main
HEAD_SHA=$(git rev-parse HEAD)
```

□ 2. Dispatch the code-reviewer subagent

Use the `Task` tool with the `code-reviewer` type. Fill in the `references/code-reviewer.md` template.

Placeholders

- `{WHAT_WAS_IMPLEMENTED}`: what you just built.
- `{PLAN_OR_REQUIREMENTS}`: what you were supposed to do.
- `{BASE_SHA}`: the starting commit.
- `{HEAD_SHA}`: the ending commit.
- `{DESCRIPTION}`: a short summary.

For a change being prepared for push or amend, include the actual workflow/job inventory and local preflight evidence from `finishing-a-development-branch` Step 1: all relevant locally executable CI equivalents, tested tree, runtime versions, and unavoidable runner differences. A focused subset is not the full preflight. A reviewer should identify missing checks, not treat an unexplained local pass as CI parity. Changes after those checks invalidate affected results; repeat them before publishing the replacement, without adding skip flags or weakening CI.

□ 3. Respond to the feedback

- Critical issues: fix immediately
- Important issues: fix before proceeding
- Minor issues: note for later
- If the reviewer is wrong, push back (with evidence)

## Remote Pull Request Review Gate

A local reviewer and passing CI do not establish that remote review is complete. Conversely, a clean review does not establish successful CI. When the work has a pull request, perform this gate before integration, including a direct fast-forward push to the base branch. Use the provider API or its authenticated CLI (`gh` for GitHub); a checks summary alone is insufficient.

1. Read the PR's current head SHA and the configured or requested review sources. Fetch every page of submitted reviews, inline comments, PR conversation summaries, and review threads with their resolution state. Include automation results delivered as comments or reactions, not only formal approvals. Read relevant outstanding findings from earlier PRs in this change's lineage, including merged PRs, when their affected code is still present; do not turn this into an unrelated repository-wide audit.
2. Bind the review result to the current head. Record each source's reviewed commit, completion state, and findings. Pending, unavailable, stale, or unidentifiable results are not a clean review. An empty comment list is not proof that a requested reviewer finished. If no remote reviewer is configured or requested, record that fact after inspection rather than inventing a new required service.
3. Reconcile each finding with the current implementation and the user's actual requirements. Reproduce a plausible bug, fix a valid issue, or record evidence for rejecting an incorrect or superseded finding. A bot's priority label is not authority to override user instructions. Unresolved threads require an explicit disposition; a dismissed review, resolved thread, or merged earlier PR does not by itself prove that its underlying issue was fixed.
4. After a fix, amend, rebase, or squash changes the head, reread the remote state and obtain the required review for that head. Preserve earlier findings until current code and evidence resolve them. Request or retrigger a review through the configured workflow when needed and already authorized; this skill does not independently authorize posting comments or messages. Continue useful authorized fixes while review is pending, and report an unavailable review honestly instead of silently substituting CI or local review.
5. Immediately before integration, read the head, review state, and applicable remote CI results again. Integrate only the reconciled head, with no unaddressed valid blocking findings, all required reviews complete, and successful applicable remote CI for that exact head. Local equivalents, an older green SHA, pending jobs, or silently skipped required jobs do not satisfy remote CI. If the head moved, return to step 2 and repeat affected local preflight before another push. Follow any explicit user decision to waive or change review requirements, but report the resulting limitation and never label an unperformed review clean.

Record a compact result with the PR URL, head SHA, review sources and completion evidence, finding dispositions with code/test evidence, unresolved items, and integration decision. A provider's successful merge response is not retrospective evidence that this gate ran.

| Temptation | Required response |
| --- | --- |
| CI passed and the local reviewer approved | Read remote reviews, comments, and unresolved threads before merging. |
| Focused tests passed; the remote runner can find the rest | Inventory the actual workflows and run every relevant local equivalent before push; record only unavoidable runner gaps. |
| Remote review is clean, so pending CI is enough | Wait for successful applicable CI on the exact head; review and CI prove different things. |
| The old PR is merged, or the comment is outdated | Check whether the finding still applies to current code; carry it forward until reconciled. |
| The bot was quiet after the amend | Confirm completion for the new head; silence or a review of the old SHA is insufficient. |
| The bot demands behavior contrary to the user | Evaluate and reject it with evidence; do not implement it blindly. |
| The user already said to merge | Finish the required checks and merge without asking them to select the workflow again. |

## Example

```
[Task 2 complete: validation function added]

You: Request a code review before proceeding.

BASE_SHA=$(git log --oneline | grep "Task 1" | head -1 | awk '{print $1}')
HEAD_SHA=$(git rev-parse HEAD)

[dispatch code-reviewer subagent]
  WHAT_WAS_IMPLEMENTED: conversation index validation and repair functions
  PLAN_OR_REQUIREMENTS: Task 2 of .tmp/implementation-plans/deployment-plan.md
  BASE_SHA: a7981ec
  HEAD_SHA: 3df7661
  DESCRIPTION: added verifyIndex() and repairIndex(), four issue types

[subagent returns]:
  Strengths: clean architecture, real tests
  Issues:
    Important: progress indicator missing
    Minor: reporting interval magic number (100)
  Assessment: ok to proceed

You: [fix the progress indicator]
[proceed to Task 3]
```

## Workflow Integration

□ Subagent-Driven Development

- Review after each task
- Catch issues before they accumulate
- Fix before the next task

□ Executing Plans

- Review after each batch (3 tasks)
- Take the feedback, apply it, then proceed

□ Ad-Hoc Development

- Review before merge
- Review when stuck

## Red Flags

□ Never do

- Skipping review because the change "is simple"
- Ignoring Critical issues
- Proceeding with unfixed Important issues
- Arguing with valid technical feedback

□ When the reviewer is wrong

- Push back with technical evidence
- Present code and tests that prove the behavior
- Ask for clarification

Template: `references/code-reviewer.md`

Attribution

AidALLAidALL
View sourceMore from AidALL →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman

Ultra-compressed communication mode that cuts output tokens while keeping technical accuracy. Levels: lite, full, ultra and the wenyan variants. Use for /caveman, "caveman mode", "talk like caveman", "be brief" or "less tokens".

1074701 votes

Hyperplan

Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...

695601 votes

Mcp Code Execution

Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.

3351 votes

catchup

Recovers the conversation and failed tool calls of a previous Codex, Claude Code, Antigravity, Cline, Copilot CLI, Cursor, DeepSeek Harness, Kimi, OpenCode, Pi Agent, or ZCode session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", asks to recover/summarize a previous session before continuing, or asks to diagnose or report a catchup failure. Do NOT use for the current conversation, git history, or any non-agent log.

691 votes

math-skill

A comprehensive mathematical reasoning skill for AI assistants — handles arithmetic to research-level problems with rigorous step-by-step reasoning, systematic verification, and transparent uncertainty handling

381 votes
View all in ai-agents →