Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsBlogPro
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges
  • Chrome Extension
  • Skill Manager

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Review Issue

ASecurity

Review a GitHub issue for completeness, clarity, acceptance criteria quality, and time budget defensibility before development begins.

10 stars
0 votes
0 copies
0 views
Added 10/6/2026
documentationgobashgit

Works with

cli

Security Analysis

A100/100

Scanned 10/6/2026

$npx -y skills add tomzx/agents --skill review-issue --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Review Issue?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Review Issue
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tomzx-review-issue/badge)](https://www.skillsdirectory.com/skills/tomzx-review-issue)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
Files
SKILL.md
---
name: review-issue
description: Review a GitHub issue for completeness, clarity, acceptance criteria quality, and time budget defensibility before development begins.
allowed-tools: Bash(gh:*, ghx:*, ~/.agents/scripts/get-env:*), Read, Write
argument-hint: "<issue-url-or-number>"
---

# Review Issue

Audits an existing GitHub issue and reports findings across five categories: completeness, clarity, acceptance criteria quality, time budget defensibility, and scope.
If findings exist, either proposes an edited issue body in the conversation or posts a comment requesting improvements.

## Prerequisites

- Apply the shared SDLC conventions in `skills/sdlc/references/shared.md`.
- If no argument is provided, target the issue from `$ISSUE_NUMBER` (and `$REPO`).
- `gh` CLI authenticated with access to the repository
- Issue URL or number (`$1`)

## Steps

1. Fetch the issue and its comments:
   ```
   ghx issue view $1 --comments
   ```
2. Identify the issue type (bug / feature / question / chore).
3. Evaluate using the checklist below.
4. Report findings. If findings exist, choose one of:
   - Propose a revised issue body in the conversation for the user to approve, then apply with `gh issue edit`
   - Post a comment requesting clarification (when the missing information must come from the reporter)

## Review Checklist

### Completeness

**Bug reports:**
- Is the unexpected behavior clearly described?
- Are steps to reproduce provided?
- Are the expected vs. actual behaviors stated?
- Is the affected version or environment mentioned?

**Feature requests:**
- Is the problem or use case described (not just the desired solution)?
- Is the intended user or stakeholder identified?
- Is the scope reasonably bounded?

**All types:**
- Is background/context present?
- Are acceptance criteria present?
- Is there a time budget (for private repositories)?

### Clarity
- Is the title specific enough to understand the issue without reading the body?
- Is the description free of ambiguous terms?
- Are acceptance criteria written as verifiable conditions, not vague goals?

### Acceptance Criteria Quality
- Is each AC testable (can a concrete test be written for it)?
- Is each AC specific about what, not how?
- Are ACs split into **Must** (the exit gate) and **Should** (deferrable)? If a flat list is used, propose the split.
- Is **Must** minimal? If it exceeds roughly 5 items, flag the issue as likely too broad and recommend splitting the issue.
- Do the **Must** ACs cover the happy path, with edge cases and error handling moved to **Should** (or kept in Must only when they gate "done")?
- Are there duplicate or contradictory ACs?
- Are there ACs implied by the description but not stated?

### Time Budget
- For private repositories, is a total estimate present?
- Is the estimate justified by a **breakdown** (work area : sub-estimate : one-line cost driver) rather than a bare number?- Are the **assumptions** the estimate depends on (what is already in place, what is out of scope) stated?
- Does the total roughly match the sum of the breakdown items, with no unexplained gap?
- Is the scope consistent with the budget? (A large budget for a thin scope, or a thin budget for a broad scope, is a warning sign.)

### Scope
- Is the issue focused on one thing (not a bundle of unrelated changes)?
- Are there tasks in the body that belong in separate issues?

## Output Format

```markdown
## Completeness

<Findings or "No issues found.">

## Clarity

<Findings or "No issues found.">

## Acceptance Criteria

<Findings or "No issues found.">

## Time Budget

<Findings or "No issues found.">

## Scope

<Findings or "No issues found.">

## Suggested Additions

<Missing ACs or sections that should be added, ready to copy into the issue.>
```

If there are no findings across all categories, confirm: "Issue looks complete and well-formed — ready to proceed to `/create-requirements`."

## Outcome

If `$OUTCOME_YAML` is set, emit your verdict there per `skills/sdlc/references/shared.md`:

| Verdict | When |
|---|---|
| `approved` | No blocking findings; the subject passes review |
| `changes-requested` | Findings the author must address before it passes |
| `rejected` | Fundamental flaw requiring rework or stopping |

## Example Usage

**Scenario 1: Bug report missing reproduction steps**
```
/review-issue 42
```
Issue says "login is broken" with no steps to reproduce.
Report under Completeness. Post comment asking for steps, expected behavior, and observed behavior.

**Scenario 2: Feature with untestable ACs**
```
/review-issue https://github.com/owner/repo/issues/88
```
AC says "the UX should be smooth."
Report under Acceptance Criteria. Propose rewrite: "The user can complete checkout in 3 steps or fewer."

**Scenario 3: Issue bundling multiple features**
```
/review-issue 100
```
Issue describes adding dark mode, changing font sizes, and updating the color palette.
Report under Scope — recommend splitting into three focused issues.

**Scenario 4: Missing edge case ACs**
```
/review-issue 55
```
Feature describes a file upload flow. ACs cover the happy path but say nothing about oversized files, unsupported formats, or network failures.
Report under Acceptance Criteria. Propose the missing ACs (in **Should**, since they are deferrable edge cases unless they gate "done").

**Scenario 5: Flat acceptance criteria list with no prioritization**
```
/review-issue 77
```
Issue lists 8 ACs in a flat checklist, mixing happy-path items with edge cases and polish.
Report under Acceptance Criteria. Propose splitting into **Must** (the ~3 that define "done") and **Should** (the rest), and flag that 8 Must-level items suggests the issue is too broad and should be split.

**Scenario 6: Undefendable time budget**
```
/review-issue 64
```
Private-repo issue has "Time budget: 8h" with no breakdown or assumptions.
Report under Time Budget. Propose a breakdown such as "schema migration: 2h (new table)", "endpoint: 3h (reuses auth middleware)", and "tests: 2h", plus an assumptions line such as "assumes the auth middleware already exists; no data backfill".

## Useful Commands Reference

| Command | Description |
|---|---|
| `ghx issue view <issue> --comments` | Fetch issue details and comments (cached) |
| `gh issue edit <issue> --body "..."` | Update the issue body with improved content |
| `ghx issue comment <issue> --body "..."` | Post a comment requesting clarification from the reporter |

Attribution

tomzxtomzx
View sourceSee grades on GitHubMore from tomzx →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Context Fundamentals

Understand the components, mechanics, and constraints of context in agent systems. Use when designing agent architectures, debugging context-related failures, or optimizing context usage.

179001 votes

Architecture Diagram Creator

Create comprehensive HTML architecture diagrams with data flows, business context, and system architecture.

6661 votes

release-notes

Draft release notes and changelog entries from git history or merged PRs between two refs (tags/SHAs/branches), including breaking changes, migrations, and upgrade steps. Use when the user asks for release notes, changelog updates, or a GitHub Release draft.

1301 votes

docs-style-guide

Documentation style guide enforcer by @planetabhi. Applies and reviews the writing style guide when authoring or editing product documentation and tutorials. Use to check prose for voice, tense, word choice, inclusive language, formatting, code block, UI, Markdown, and number/date conventions.

11 votes

Docx

Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to produce professional documents with formatting like tables of contents, headings, page numbers, or letterheads. Also use when extracting or reorganizing content from .docx or .dotx files, inserting or replacing images in documents, performing find-and-replace in W...

1798860 votes
View all in documentation →