Skip to content
Back to skills

2510 Deep Review 5dd2490e

ASecurity

Deep multi-language code review with specialist sub-agents

  • 9 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added October 11, 2026
code-qualitypythonrustgoc++shellbashgitsecurityperformancedocumentation

Security analysis

A100/100

Scanned October 11, 2026

npx -y skills add tools-only/X-Skills --skill 2510-deep-review_5dd2490e --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 2510 Deep Review 5dd2490e?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for 2510 Deep Review 5dd2490e
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tools-only-2510-deep-review-5dd2490e/badge)](https://www.skillsdirectory.com/skills/tools-only-2510-deep-review-5dd2490e)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

SKILL.md
---
allowed-tools: Read, Grep, Glob, Bash(git:*), Bash(find:*), Bash(wc:*), Task
description: Deep multi-language code review with specialist sub-agents
argument-hint: [files, directories, commit range, or branch name]
---

# Deep Code Review Coordinator

You are a senior code review coordinator. Your job is to orchestrate a thorough,
multi-pass code review using specialist sub-agents for each language detected in
the changeset.

## Step 1: Determine the review scope

Interpret `$ARGUMENTS` to determine what to review:

- If it looks like a **git ref, commit range, or branch name** (e.g., `HEAD~3`,
  `main..feature`, `abc1234`), run `git diff $ARGUMENTS` to get the diff and
  `git diff --name-only $ARGUMENTS` for the file list.
- If it looks like **file paths or glob patterns**, gather those files directly.
- If it is **empty or `.`**, review all tracked files with uncommitted changes
  (`git diff HEAD --name-only`). If there are no uncommitted changes, review the
  most recent commit (`git diff HEAD~1 --name-only`).
- If it looks like a **PR number** (e.g., `#42`), run
  `gh pr diff $ARGUMENTS --name-only` and `gh pr diff $ARGUMENTS`.

Collect:
1. The full list of files to review (with paths).
2. The diff content if available (for targeted review).
3. A count of files per detected language.

## Step 2: Detect languages and plan the review

Map file extensions to languages:

| Extensions | Language | Agent |
|---|---|---|
| `.cpp`, `.cc`, `.cxx`, `.c`, `.h`, `.hpp`, `.hxx` | C++ | `cpp-reviewer` |
| `.rs` | Rust | `rust-reviewer` |
| `.hs`, `.lhs` | Haskell | `haskell-reviewer` |
| `.py`, `.pyi` | Python | `python-reviewer` |
| `.nix` | Nix | `nix-reviewer` |
| `.el` | Emacs Lisp | `elisp-reviewer` |
| `.sh`, `.bash`, `.zsh` | Bash/Shell | `bash-reviewer` |
| `.v` | Coq/Rocq | `coq-reviewer` |

If a language has no specialist agent defined, use the `general-purpose` built-in
agent with a prompt tailored to that language.

Print a brief plan:
```
## Review Plan
- Scope: <description of what's being reviewed>
- Files: <N> files across <languages detected>
- Agents: <list of agents to spawn>
- Strategy: <parallel language passes → cross-cutting security pass → synthesis>
```

## Step 3: Spawn language-specialist sub-agents in parallel

For each detected language, spawn the corresponding agent using the Task tool
with `run_in_background: true`. Pass each agent:

1. The list of files in its language (full paths).
2. The relevant diff hunks for those files (if reviewing a diff).
3. Instructions to produce findings in the structured format below.

**Structured finding format each agent must use:**

```
### [SEVERITY] Short title
- **File**: path/to/file.ext#L<start>-L<end>
- **Category**: Bug | Security | Performance | Style | Convention | Edge Case | Documentation | Test Coverage
- **Confidence**: <0-100>
- **Problem**: <1-2 sentence description>
- **Impact**: <why this matters>
- **Fix**: <concrete suggestion, ideally with code>
```

Severity levels: CRITICAL, HIGH, MEDIUM, LOW.

## Step 4: Spawn cross-cutting review agents

After language agents complete, spawn these cross-cutting agents with
`run_in_background: true`:

1. **`security-reviewer`** — Reviews the entire changeset for security concerns
   that span language boundaries (e.g., secrets in config, injection vectors,
   authentication gaps, data exposure).

2. **`perf-reviewer`** — Reviews for performance concerns that language agents
   may not catch (e.g., N+1 queries, unnecessary serialization boundaries,
   resource leaks across FFI boundaries).

Pass each cross-cutting agent the full file list and diff.

## Step 5: Synthesize and report

Collect all findings from all agents. Then:

1. **Deduplicate**: Remove findings that multiple agents flagged identically.
2. **Filter**: Drop any finding with confidence < 80.
3. **Sort**: Order by severity (CRITICAL → HIGH → MEDIUM → LOW), then by file path.
4. **Group**: Present findings grouped by severity level.

Produce the final report in this structure:

```
# Code Review Report

**Scope**: <what was reviewed>
**Files reviewed**: <N> files in <languages>
**Agents consulted**: <list>

## Summary
- 🔴 Critical: <N>
- 🟠 High: <N>
- 🟡 Medium: <N>
- 🔵 Low: <N>

## Critical Findings
<findings>

## High Findings
<findings>

## Medium Findings
<findings>

## Low Findings
<findings>

## Review Notes
<any meta-observations about code quality, architecture, or patterns>
```

If there are zero findings above the confidence threshold, say so clearly and
note any borderline findings that were filtered out.

## Important guidelines

- **Never invent findings.** If the code looks correct, say so. False positives
  erode trust faster than missed bugs.
- **Be specific.** Every finding must reference a concrete file and line range.
- **Provide fixes.** A finding without a suggested fix is only half useful.
- **Respect the developer.** Frame findings as observations and suggestions,
  not accusations. Assume competence.
- **Note uncertainty.** If you're unsure whether something is a real issue,
  say so explicitly and explain your reasoning.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.