Skip to content
Back to skills

Tf Review

ASecurity

Review REVIEW-status tasks as PM, check code quality, then approve or reject.

  • 8 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 1, 2026
ai-agentsgobashsqlfastapiapifrontendbackendsecurity

Works with

  • claude code
  • api
  • mcp

Security analysis

A100/100

Pro scans all 4 files and shows the line behind each finding

Scanned October 1, 2026

npx -y skills add marblo-app/marblo --skill tf-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Tf Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Tf Review
[![Security: A β€” Skills Directory](https://www.skillsdirectory.com/api/skills/marblo-app-tf-review/badge)](https://www.skillsdirectory.com/skills/marblo-app-tf-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: tf-review
description: Review REVIEW-status tasks as PM, check code quality, then approve or reject.
disable-model-invocation: true
allowed-tools: Bash, Read, Glob, Grep
---

# Marblo PM Review

> Review the REVIEW tasks agents submitted.
> Check code quality and approve (DONE) or reject (revert to TODO).

---

## β›” Required rule: Marblo MCP only

> **Never use the Claude Code built-in tools (TaskCreate, TaskList, TaskUpdate, TaskGet).**
> Task lookup/status-change MUST use the **Marblo MCP tools**:
> `get_all_tasks`, `update_task_status`, `add_activity`, `get_task_activities`

---

## Step 1: Fetch tasks awaiting review

Filter `get_all_tasks` to only REVIEW status.

```
πŸ‘€ Awaiting review: {n}
━━━━━━━━━━━━━

1. TASK-002: User API (backend)
   Submitted: 30 min ago | Owner: backend-agent

2. TASK-004: URL input screen (frontend)
   Submitted: 15 min ago | Owner: frontend-agent
```

---

## Step 2: Review each task

For each task, check the following:

### 2-1. Check the activity log

Use `get_task_activities` to understand what the agent did.

### 2-2. Check the code

Read and review the files listed in the task's scope field.

### 2-3. Review checklist

```
β–‘ Feature completeness: are all requirements from the task description implemented?
β–‘ Code quality: did it follow the skill file's rules (framework, patterns)?
β–‘ Tests included: is there test code and does it pass?
β–‘ Error handling: are exceptional cases handled properly?
β–‘ Scope compliance: did it avoid modifying files outside scope?
β–‘ Security: no vulnerabilities like SQL injection, XSS?
```

### 2-4. Verdict

Show the review result to the user:

```
πŸ“ TASK-002: User API review result
━━━━━━━━━━━━━━━━━━━━━━━━━

βœ… Feature completeness: signup, login, profile lookup β€” OK
βœ… Code quality: FastAPI + Pydantic v2 β€” OK
βœ… Tests: 5/5 pass β€” OK
⚠️ Error handling: no password validation
βœ… Scope compliance: OK

Verdict: approve or reject?
```

---

## Step 3: Approve / reject

### Approve

- `update_task_status` β†’ DONE
- If it unblocks any tasks, let the user know:
  ```
  βœ… TASK-002 approved β†’ DONE
  πŸ”“ TASK-004, TASK-005 are now workable
  ```

### Reject

- `update_task_status` β†’ TODO (include a feedback comment)
- Record a concrete change request with `add_activity`:
  ```
  ❌ TASK-002 rejected β†’ TODO
  Feedback: "Add password validation (8+ chars, include special char).
            Make error messages user-friendly too."
  ```

---

## After review

After handling all REVIEWs, show the status:

```
πŸ“Š Review complete:
   Approved: {n}
   Rejected: {n}

   Newly available tasks: {list}
   Next action: /tf-work or re-run the agents
```

Files in this skill

  • COMMAND.md204 B
  • README.md2.7 KB
  • SKILL.md2.7 KB
  • marblo.yaml1.1 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.