Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

Back to skills

Agent Review

ASecurity

Request interactive code review from users using the agent-review CLI tool. Automatically captures user feedback on code changes.

207 stars
0 votes
0 copies
2 views
Added 9/4/2026
code-qualitytypescriptgobashgit

Works with

cli

Security Analysis

A96/100
mediumInstalls packages at runtime which could introduce malicious dependencies

Scanned 9/4/2026

Install to Claude Code

$npx -y skills add NeverSight/skills_feed --skill agent-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Agent Review?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Agent Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/neversight-agent-review-learn-skills-dev/badge)](https://www.skillsdirectory.com/skills/neversight-agent-review-learn-skills-dev)

More formats (shields.io, HTML) on the badges page.

Download Zip
Files
SKILL.md
---
name: agent-review
description: Request interactive code review from users using the agent-review CLI tool. Automatically captures user feedback on code changes.
---

# Code Review Skill

Use this skill when you need to get human feedback on code changes you've made.

## When to Use This Skill

- After implementing features or fixes
- Before committing significant changes
- When you want user feedback on your approach
- When the user explicitly asks you to review your code

## Installation

If agent-review isn't installed:

```bash
npm install -g agent-review
# or run directly: npx agent-review
```

## How to Use


### Step 1: Run the Code Review Tool

**CRITICAL:** Always run agent-review **inline** (not in background) with a long timeout:

```typescript
Bash({
  command: "npx agent-review", 
  description: "Start code review session",
  timeout: 600000,  // 10 minutes - user needs time to review
})
```

**DO NOT:**
- ❌ Use `run_in_background: true`
- ❌ Use default timeout (2 minutes is too short)
- ❌ Poll bash output with BashOutput

**WHY:**
- The tool blocks until user submits review
- Running inline means you automatically get output when done
- User needs time to review code and add comments
- Feedback is printed to stdout when complete

### Step 2: Automatically Read the Review Feedback

After the tool completes, read the structured JSON feedback:

```typescript
Read({
  file_path: "/path/to/project/.agent-review/latest-review.json"
})
```

This gives you structured data with:
- Line-by-line comments (file, line number, comment text)
- General feedback
- Review statistics

### Step 3: Act on the Feedback

Process the review feedback:

1. **Read line comments** - Address each specific suggestion
2. **Read general feedback** - Consider overall recommendations
3. **Make changes** - Implement requested fixes
4. **Explain** - Tell the user what you changed and why

## Example Workflow

```typescript
// 1. Run code review (inline, long timeout)
const result = await Bash({
  command: "npx agent-review",
  description: "Request code review from user",
  timeout: 600000,  // 10 min
});

// 2. Read structured feedback
const reviewData = await Read({
  file_path: ".agent-review/latest-review.json"
});

// 3. Parse and process
const review = JSON.parse(reviewData);

// 4. Address feedback
for (const comment of review.feedback.lineComments) {
  console.log(`${comment.file}:${comment.line} - ${comment.comment}`);
  // Make changes based on comment
}

// 5. Report back to user
"I've addressed your feedback:
- Fixed the issue in src/app.ts:42 (using const instead of let)
- Updated error handling as suggested
..."
```

## Review Data Structure

The `.agent-review/latest-review.json` file contains:

```json
{
  "id": "review-1234567890",
  "timestamp": "2026-02-03T17:23:33.377Z",
  "diff": { /* full git diff data */ },
  "feedback": {
    "timestamp": "2026-02-03T17:23:33.377Z",
    "lineComments": [
      {
        "file": "src/app.ts",
        "line": 42,
        "oldLine": 41,
        "comment": "Consider using const instead of let",
        "context": "let x = calculateTotal();"
      }
    ],
    "generalFeedback": "Overall looks good!",
    "stats": {
      "filesReviewed": 5,
      "commentsAdded": 3
    }
  }
}
```

## Best Practices

1. **Always run inline** - Never use background mode
2. **Use long timeout** - 600000ms (10 min) minimum
3. **Auto-read feedback** - Don't ask user to tell you the feedback
4. **Address all comments** - Go through each line comment
5. **Summarize changes** - Tell user what you fixed

## Common Mistakes to Avoid

❌ **Running in background:**
```typescript
// WRONG - you won't get the output automatically
Bash({
  command: "npx agent-review",
  run_in_background: true
})
```

❌ **Short timeout:**
```typescript
// WRONG - will timeout before user finishes
Bash({
  command: "npx agent-review",
  timeout: 120000  // 2 min too short
})
```

❌ **Asking user for feedback:**
```typescript
// WRONG - feedback is already in the JSON file!
"What feedback do you have?"
```

✅ **Correct usage:**
```typescript
// RIGHT - inline, long timeout, auto-read
await Bash({
  command: "npx agent-review",
  timeout: 600000
});

const review = await Read({
  file_path: ".agent-review/latest-review.json"
});
```

## Tips

- **Before review:** Tell user what changed: "I've implemented X feature across 5 files. Ready for review?"
- **During review:** The tool auto-opens browser and waits for user
- **After review:** Process feedback immediately and show user your changes
- **Commit option:** User can choose to commit during review - check the bash output


**Remember:** Always run inline with long timeout, then auto-read the JSON feedback!

Attribution

NeverSightNeverSight
View sourceMore from NeverSight →
SSkills DirectorySkills Directory

Know which skills are safe — weekly.

Best new skills + every skill we flagged as malicious. From the team that scanned 103,619.

Join free

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Know which skills are safe — weekly.

Best new skills + every skill we flagged as malicious. From the team that scanned 103,619.

Join free

Related Skills

Caveman Review

Ultra-compressed code review comments. Cuts noise from PR feedback while preserving the actionable signal. Each comment is one line: location, problem, fix. Use when user says "review this PR", "code review", "review the diff", "/review", or invokes /caveman-review. Auto-triggers when reviewing pull requests.

1023331 votes

Caveman Commit

Ultra-compressed commit message generator. Cuts noise from commit messages while preserving intent and reasoning. Conventional Commits format. Subject ≤50 chars, body only when "why" isn't obvious. Use when user says "write a commit", "commit message", "generate commit", "/commit", or invokes /caveman-commit. Auto-triggers when staging changes.

1023331 votes

Springboot Verification

Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.

2456590 votes

Verification Loop

一个全面的 Claude Code 会话验证系统。

2456590 votes

Django Verification

Verification loop for Django projects: migrations, linting, tests with coverage, security scans, and deployment readiness checks before release or PR.

2456590 votes
View all in code-quality →