kyy-logs code-review-skill
code-review-skill
A code review skill with four independent probes, evidence-backed findings and a merge gate derived from JSON
- 305 ★ on the repository
- Last commit
- MIT
Extended access
Why this level
- The skill scripts run in your project root through Bash and reports are written to `docs/work/`
- The four probes pass the diff and surrounding code to the model, so private code reaches its provider
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add skills/kyy-logs-code-review-skillDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- The skill scripts run in your project root through Bash and reports are written to `docs/work/`
- The four probes pass the diff and surrounding code to the model, so private code reaches its provider
This is third-party code. Review the repository files before installing.
What it does
The `code-review` skill for Claude Code and Codex reviews changes without a build, a test run or a coverage report. It takes the diff, surrounding code, tests and project rules in one of two modes: `worktree` for working-tree changes or `commits` for a `base..head` range. It does not modify the project code. Four probes run in fresh contexts and each writes its own JSON. `behavior-review` checks behavior against the contract, `test-coverage` judges whether tests are meaningful, `repo-guard` looks for violations of repository rules, and `impact-analysis` shows callers, affected contracts and performance consequences. The first three probes are required. A finding without a location, summary and checkable evidence is not a finding, and severity is `high`, `medium` or `low`. The `code-review.md` report and the gate verdict are rendered from JSON, so figures are not retyped by the model. Open high findings and a failed required probe block the merge. The skill comes in English and Chinese (`code-review-zh`).
Who it is for. Teams and solo developers who ask an agent to review diffs before a commit or merge and want to see links to lines and contracts.
Good fit when
- Before a commit you want a review in which every remark points to a file, a line and the contract it breaks
- A pull request has to pass a formal gate that reads from the probes' JSON records
- A Java, TypeScript or Vue repository with its own rules in `.code-review/rules/`
- A refactor touches a shared contract and you need to know who calls it
Not a fit when
- You want a substitute for tests, CI or human review: the author states that a clean report does not prove the change is correct
- You need independent human adjudication: all four probes run on the same model
- The project has heavily concurrent code: detection of concurrency defects has not been validated
- The change is only documentation or typos that do not affect code behavior
Example request
Review the current changes with the code-review skill and say whether they can be mergedLimitations
The `v0.1.0-beta.3` release of 31 October 2026 is a test version: the probe contract, report schema and gate behavior may change before 1.0. Records written with the old four-level severity, including `critical`, are incompatible and `collect-metrics` rejects them. The default `repo-guard` probe selects `.java`, `.ts`, `.tsx` and `.vue` files, its built-in rules target Java and Spring, and the authors do not claim full coverage of other stacks. It needs Node.js 22.20 or newer, Python 3.9 with PyYAML, Bash, Git, awk, grep and sed. Project rules replace the built-in pack entirely and do not merge with it.
How to disable. Delete the `.claude/skills/code-review` folder (`.agents/skills/code-review` for Codex) in the project. Reports stay in `docs/work/active/` and are removed by hand.
FAQ
How do I install code-review-skill in Claude Code?
In the project root run `npx -y skills add kyy-logs/code-review-skill --agent codex --skill code-review --yes` and replace `codex` with `claude-code`. The skill lands in `.claude/skills/code-review/`, and in `.agents/skills/code-review/` for Codex.
What is left after a review?
The `docs/work/active/<slug>/` folder gets a `code-review.md` report and a `probes/` directory with four JSON files. The gate and counters are derived from those files.
Can I install the Chinese version?
Yes, install the `code-review-zh` skill with the same command. A project needs only one language version, and the Python installers accept `--lang en` or `--lang zh-CN`.
How do I add my own project rules?
Put them in `.code-review/rules/` or point to a folder with the `CODE_REVIEW_RULES_DIR` variable. A project rule package fully replaces the built-in one.
Do I need a build and a test run?
No, the review is static: the skill reads the diff, surrounding code, tests and project rules. If coverage data exists, it uses it. When tests fail or were not run, the report says so and does not claim the merge conditions are met.
Discussion
No questions or reviews yet.
Related
SkillsA code review skill across many languages and frameworks: architecture, performance, security, anti-patterns and common bugs
Two skills: a pull request review where two models argue, and a helper that works through review comments round by round
A Codex skill for reviewing AI-written code: explains blocks, names files and lines, checks goals against evidence.
Guard skills for coding agents: a second pass over the diff that catches typical AI mistakes in code, tests and docs
A code-review CLI and plugin for agents: reads a git diff and writes line-level comments with context
cross-review sends plans and code to a second model for review: Codex, Claude Code or Antigravity checks your agent's work.
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| kyy-logs code-review-skill (this card) | no | 305 | ||
| code-review-graph | no | not required | 32,612 | builds a code graph and serves it through an MCP server |
| open-code-review | no | 49,561 | runs reviews from the command line |
README in short
The README opens with the latest beta news and a release status section listing incompatible changes. It then covers the workflow, the finding contract, rule configuration, what the skill is not, and validation: 74 offline tests and end-to-end runs on clean projects.
README badge
Original SKILL.md
---
name: code-review
description: Use when code has been written, before committing, or when merging a PR; also when the user says "review my code", "check before commit", "take a look at this change", "PR review", or asks for a strict review/merge gate.
---
# Code Review
> Check for code defects, test quality, and change impact, and confirm that the issues found are closed.
## Resources and Execution Location
- `references/`, `scripts/`, and `assets/` are relative to the directory containing the `SKILL.md` read for this run.
- Run shell commands from the **reviewed project root**; `docs/work/`, code paths, and project rules all belong to the reviewed project.
- `CODE_REVIEW_SKILL_DIR` below is the absolute path of the skill installation directory. Set it on every shell invocation, or replace it directly with the actual absolute path; do not assume variables persist across different shell invocations.
- Scripts require basic commands such as Bash 3.2+, Git, awk, grep, and sed. Invoke them via `bash`; no executable bit is needed.
- Report parsing requires Python 3.9+ and PyYAML; `python` is invoked by default, and `CODE_REVIEW_PYTHON` can specify the interpreter's absolute path.
For installation, see the release repository README; the in-repo entry point is `scripts/install.py`.
## Scope
- Review functional, bug-fix, refactoring, or configuration changes that affect code behavior.
- Pure documentation, formatting, or typo changes that do not affect code behavior may be skipped.
- Static review is still possible when tests fail or have not been run; the report must state the test status and must not claim that merge conditions are met.
## Inputs
| Input | Required | Description |
|---|---|---|
| git repository + diffable changes | Yes | Specify whether to review uncommitted changes or a committed base/head range |
| Acceptance criteria | No | When provided, check them off one by one under "Optional Wrap-up" |
| Coverage data / command | No | When provided, used for the optional measurement in `test-coverage`; without it, static quality checks on the relevant test code still run |
| Rule pack | No | Defaults to the skill's built-in `references/rules/`; can be overridden with `CODE_REVIEW_RULES_DIR` |
| Review identifier | No | `{slug}`, defaults to `<date>-<topic>` |
The artifact root `{output_root}` defaults to `docs/work`; override it with project `.code-review/config.json` `output_dir` or `CODE_REVIEW_OUTPUT_DIR`. This run's artifacts are written to `{output_root}/active/{slug}/`.
## Review Process
> Check items are not hardcoded in this file; they are driven by the `references/probes.yaml` registry.
> Probe implementation details are in `references/probes/<probe-name>.md`; this file covers **main workflow orchestration and shared probe execution boundaries**.
>
> **Execution boundary: static review by default.** For coverage checks, prefer reusing an existing report;
> when measurement is needed, coverage commands may be run within what this round's task allows. Other checks remain read-only evidence.
> Do not modify the reviewed source code during review. Test and CI output are review evidence;
> **all tests green does not mean the behavior is correct**.