Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsBlogPro
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges
  • Chrome Extension
  • Skill Manager

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Receiving Code Review

ASecurity

Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation

8 stars
0 votes
0 copies
0 views
Added 10/6/2026
ai-agentsrustgobashreactexpresstestingdebuggingrefactoringcode-reviewsecurity

Security Analysis

A100/100

Scanned 10/6/2026

$npx -y skills add bordenet/superpowers-plus --skill receiving-code-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Receiving Code Review?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Receiving Code Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/bordenet-receiving-code-review/badge)](https://www.skillsdirectory.com/skills/bordenet-receiving-code-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
Files
skill.md
---
name: receiving-code-review
disable-model-invocation: true
source: superpowers-plus
augment_menu: true
# Override rationale: Adds Systemic Verification gate (search for OTHER instances
# of same pattern beyond reviewer's checklist), adds triggers array for auto-fire,
# and refines implementation order with systemic check step. obra's version lacks
# the "fix the disease not the symptoms" workflow.
triggers: ["/sp-receive", "received code review", "PR feedback", "reviewer commented", "code review feedback", "implement review suggestions", "address review comments"]
anti_triggers: ["review this PR", "review these changes", "send to reviewer agent", "I am the reviewer agent"]
description: Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation
summary: "Use when: implementing PR feedback. Skip when: the feedback is a simple typo fix."
coordination:
  group: code-quality
  order: 4
  requires: [providing-code-review]
  enables: [code-review-respond]
  escalates_to: [think-twice]
  internal: false
composition:
  consumes: [review-feedback]
  produces: [code-changes]
  capabilities: [implements-feedback]
  priority: 15
---
# Code Review Reception

> **Wrong skill?** Reviewing someone's PR → `providing-code-review`. Sending to reviewer agent → `code-review`. Acting as reviewer → `code-review-respond`.

## When to Use

- After receiving PR/MR review comments from any reviewer
- When review feedback seems unclear, contradictory, or technically questionable
- Before implementing any suggested changes from code review

## Overview

Code review requires technical evaluation, not emotional performance.

**Core principle:** Verify before implementing. Ask before assuming. Technical correctness over social comfort.

## The Response Pattern

WHEN receiving code review feedback:

  1. READ: Complete feedback without reacting
  2. UNDERSTAND: Restate requirement in own words (or ask)
  3. VERIFY: Check against codebase reality
  4. EVALUATE: Technically sound for THIS codebase?
  5. RESPOND: Technical acknowledgment or reasoned pushback
  6. IMPLEMENT: One item at a time, test each
  7. SYSTEMIC CHECK: Search for OTHER instances (see below)

## 🚨 Systemic Verification (MANDATORY)

**After implementing all feedback items, BEFORE claiming done:**
The reviewer's feedback identifies SYMPTOMS.
Your job is to fix the DISEASE, not just the symptoms.

AFTER implementing all items:

1. EXTRACT the underlying principle/goal — e.g., "Remove all silent defaults" not "fix these 3 lines"
2. SEARCH for OTHER instances of the same pattern: `grep -rn "pattern" --include="*.ts" .`
3. FIX any additional instances found
4. VERIFY the GOAL is achieved, not just the checklist

### Why This Exists

**Common failure pattern:**

- Reviewer identified 3 instances of a problematic pattern
- Agent fixed all 3 listed items ✓
- Agent claimed "Done!" ✓
- A 4th instance existed that wasn't in the reviewer's list
- Only caught by adversarial self-review asking "are there OTHER places?"

**Root cause:** Treated feedback as finite checklist, not systemic issue.

### The Gate

BEFORE claiming code review changes are complete:

☐ Did I extract the underlying GOAL from the feedback?
☐ Did I search for OTHER instances of the same pattern?
☐ Did I verify the GOAL is achieved (not just items checked off)?
☐ Would a harsh reviewer find more instances I missed?

If ANY box is unchecked → you're not done

### Example

Reviewer says: "Remove hardcoded defaults at lines 96, 127, and 81"

❌ WRONG: Fix lines 96, 127, 81 → "Done!"

✅ RIGHT:
     1. Goal: "No hardcoded defaults for userRole"
     2. Search: grep -rn "userRole.*||.*'guest'" .
     3. Find: Lines 96, 127, 81 (listed) + line 2199 (NOT listed)
     4. Fix ALL four
     5. Verify: grep returns nothing
     6. "Done - fixed 4 instances (3 listed + 1 additional in data import)"

## Response Rules

**Never performative** ("You're absolutely right!", "Great point!"). Instead: restate requirement, ask questions, push back with reasoning, or just fix it.

**Correct feedback**: "Fixed. [what changed]" or "Good catch — [issue]. Fixed in [location]." or just fix and show.

**Unclear feedback**: STOP — clarify ALL items before implementing. Partial understanding = wrong implementation.

## Source-Specific Handling

**Human partner**: Trusted — implement after understanding. Still ask if scope unclear.
**External reviewers**: Check: correct for THIS codebase? Breaks functionality? Reason for current approach? Push back if wrong. Conflicts with partner's decisions → discuss with partner first.

## Implementation Order

1. Clarify unclear items FIRST
2. Blocking (breaks, security) → simple (typos, imports) → complex (refactoring)
3. Test each individually → verify no regressions → SYSTEMIC CHECK

## Push Back When

Breaks functionality · reviewer lacks context · YAGNI · technically wrong · legacy reasons · conflicts with partner's architecture.

## Common Mistakes

| Mistake | Fix |
|---------|-----|
| Performative agreement | State requirement or just act |
| Blind implementation | Verify against codebase first |
| Batch without testing | One at a time, test each |
| Checklist ≠ goal achieved | Search for OTHER instances |
| Fixing symptoms not disease | Extract underlying goal |
| ❌ ANY gratitude expression | Ban completely |

## The Bottom Line

**External feedback = suggestions to evaluate, not orders to follow.**
Verify. Question. Then implement. Then verify the GOAL, not just the checklist.

No performative agreement. Technical rigor always.

## Anti-Patterns

| Anti-Pattern | Detection | Correction |
|--------------|-----------|------------|
| Defensive dismissal | "That's by design" without evidence | Assume reviewer saw something real |
| Blind acceptance | Fix everything without evaluation | Evaluate each: agree/disagree/discuss |
| Scope deflection | "Out of scope for this PR" for real issues | Fix if <30 min, else log TODO |
| Silent disagreement | Ignore comment, don't respond | Every comment gets a response |
| Fix without understanding | Mechanical fix, same pattern recurs | Understand root cause first |

## Failure Modes

- **Blind implementation:** Implementing every suggestion without evaluating whether it's correct for THIS codebase
- **Performative agreement:** Saying "great catch!" instead of technically verifying the feedback is accurate
- **Fixing symptoms only:** Addressing the specific line a reviewer flagged without checking for the same pattern elsewhere

## Example: Systemic Check After Review

```bash
# Reviewer says: "This null check is missing"
# WRONG: Add null check to just this line
# RIGHT: Search for ALL similar patterns in the codebase
grep -rn "\.getData()" --include="*.ts" src/ | grep -v "?." | grep -v "!= null"
# Then fix ALL instances, not just the one the reviewer spotted
```

## Companion Skills

- **providing-code-review**: How the reviewer should structure feedback
- **inter-agent-review-protocol**: File-protocol review (may generate the feedback you're processing)
- **systematic-debugging**: For investigating complex review findings
- **code-review-respond**: Review response workflow
- **code-review-battery**: Multi-reviewer orchestration

Attribution

bordenetbordenet
View sourceSee grades on GitHubMore from bordenet →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman

Terse caveman voice: answer first, fluff gone, every technical fact kept. Use for /caveman, "caveman mode", "talk like caveman", "be brief", "less tokens". Stays on until "stop caveman" or "normal mode".

1100021 votes

Hyperplan

Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...

698621 votes

Writing Skills

Create and manage Claude Code skills in HASH repository following Anthropic best practices. Use when creating new skills, modifying skill-rules.json, understanding trigger patterns, working with hooks, debugging skill activation, or implementing progressive disclosure. Covers skill structure, YAML frontmatter, trigger types (keywords, intent patterns), UserPromptSubmit hook, and the 500-line rule. Includes validation and debugging with SKILL_DEBUG. Examples include rust-error-stack, cargo-dep...

3931 votes

Mcp Code Execution

Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.

3421 votes

catchup

Recovers the conversation and failed tool calls of a previous Codex, Amp, Claude Code, Antigravity, Cline, Copilot CLI, Cursor, DeepSeek Harness, Grok Build, Kimi, OpenCode, Pi Agent, or ZCode session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", asks to recover/summarize a previous session before continuing, or asks to diagnose or report a catchup failure. Do NOT use for the current conversation, git history, or any non-agent log.

741 votes
View all in ai-agents →