Skip to content
Back to skills

Staff Code Review

ASecurity

Staff-engineer-level code review that goes beyond correctness to evaluate architectural alignment, system-level implications, failure modes, performance, scalability, backward compatibility, observability, security, and cross-team impact. Use when reviewing a PR (URL or diff), analyzing code changes for architectural fitness, or when the user asks for a thorough/staff-level/senior review of code changes. Triggers on "review this PR", "review these changes", "staff review", "thorough code revi...

  • 5 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added September 6, 2026
toolspythongobashcode-reviewgitsecurityperformance

Works with

  • claude code
  • cli

Security analysis

A100/100

Pro scans all 3 files and shows the line behind each finding

Scanned October 7, 2026

npx -y skills add smykla-skalski/sai --skill staff-code-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Staff Code Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Staff Code Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/smykla-skalski-staff-code-review-42102d20/badge)](https://www.skillsdirectory.com/skills/smykla-skalski-staff-code-review-42102d20)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: staff-code-review
description: Staff-engineer-level code review that goes beyond correctness to evaluate architectural alignment, system-level implications, failure modes, performance, scalability, backward compatibility, observability, security, and cross-team impact. Use when reviewing a PR (URL or diff), analyzing code changes for architectural fitness, or when the user asks for a thorough/staff-level/senior review of code changes. Triggers on "review this PR", "review these changes", "staff review", "thorough code review", sharing a GitHub PR URL for review, or asking about the architectural impact of changes.
license: MIT
compatibility: Works in Claude Code, Codex, opencode and Copilot CLI. Needs git and python3; gh (authenticated) for PR targets and posting. The council and humanize plugins are optional.
argument-hint: "<pr-url|file-paths|diff> [--no-adversary]"
allowed-tools: Agent Bash Read Write
user-invocable: true
metadata:
  short-description: Review changes at staff level
---

# Staff-Level Code Review

Review whether a change should exist, fits the system, survives failure, and remains operable at scale. Do not stop at line-level correctness.

## Required guidance

Before reviewing, read [references/workflow.md](references/workflow.md) completely. It is the authoritative procedure for input resolution, research, every review lens, synthesis, adversarial verification, humanization, persistence, GitHub posting, output format, and severity calibration. Follow its phases in order and load every deeper reference it names at the stated gate.

Paths in the guidance are relative to this skill directory. On agents without Claude features, use the compatibility fallbacks in its `Agent compatibility` section. Take an unresolved `$ARGUMENTS` value from the user's request.

## Core flow

1. Resolve a GitHub PR, file paths, or pasted diff; strip `--no-adversary` before resolving the target.
2. Triage necessity, problem fit, failure tolerance, comprehensibility, architectural fit, stakeholder impact, scope, size, description quality, and tests. Stop before deep review when the approach itself is wrong.
3. Build one time-bounded Research Brief covering callers, patterns, tests, history, and architecture. Give the same brief and diff to every lens.
4. Run all seven dimension reviews plus the Code Adversary. Claude Code may run them in parallel; other agents follow the sequential fallbacks in the detailed workflow.
5. Translate council-persona output when needed, synthesize and deduplicate findings, then run the independent Findings Adversary unless `--no-adversary` was given.
6. Apply the adversary verdicts, correct invalid locations and severities, and recompute the final verdict.
7. Humanize the final comments, save the artifact, and post only when the user explicitly asked for GitHub posting.

## Persona dispatch

Keep these exact dimension-to-reviewer mappings. Bundled mandates live in `references/agents/`; pass absolute deep-reference paths to subagents.

| Dimension | Claude Code persona | Bundled reviewer (`staff-code-review:` prefix) | Deep reference |
|---|---|---|---|
| Architecture & Design | `council:evans-ddd-reviewer` | `architecture-design-reviewer` | - |
| Reliability & Operations | `council:hebert-resilience-reviewer` | `reliability-operations-reviewer` | - |
| Security & Dependencies | `council:ai-quality-advisor` | `security-dependencies-reviewer` | - |
| Performance & Scalability | `council:gregg-perf-reviewer` | `performance-scalability-reviewer` | `references/performance-scalability.md` |
| Backward Compatibility | `council:siracusa-mac-critic` | `backward-compatibility-reviewer` | `references/backward-compatibility.md` |
| Convention Conformance & Code Reuse | `council:antirez-simplicity-reviewer` | `convention-conformance-reviewer` | `references/convention-conformance.md` |
| Dead Code | `council:tef-deletability-reviewer` | `dead-code-reviewer` | `references/dead-code.md` |

Run `staff-code-review:code-adversary` after the seven dimensions. After synthesis, run `staff-code-review:review-adversary`. When named agents are unavailable, prepend the identical mandate from `references/agents/<name>.md` to a generic subagent or execute it inline as the detailed fallback specifies.

## Invariants

- Ground every finding in the diff and surrounding repository evidence; include a valid changed `file:line` for GitHub comments.
- Never invent a target, caller, failure, or location.
- Preserve each council persona's native voice until translation.
- Do not let constructive reviewers validate their own findings.
- Apply REMOVE, DOWNGRADE, and REWORD verdicts before output.
- Never post without explicit user intent; a review request alone returns the review in chat.

Files in this skill

  • SKILL.md15.9 KB
  • references/review-dimensions.md8.7 KB
  • scripts/parse_review_comments.py5.6 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.