Review All

Diff-scoped review orchestrator with real automated gates, severity/confidence-tagged findings, and a mandatory triage menu.

di ncoevoet · ncoevoet/claude-review-all

Promosso ★ 9.2/10

Review All — Diff-scoped review orchestrator with real automated gates, severity/confidence-tagged findings, and a mandatory triage menu.

Cosa fa

Reviews a git diff (uncommitted, staged, a commit range, or a GitHub PR) against automated gates plus a bugs/security/DRY/perf/a11y heuristic pass, verifying every finding before it reaches the report. Triggers on /review-all, 'pre-PR review', 'pre-commit check', or an ask to audit uncommitted or staged changes.

Rapporto di test

Ran the bundled discover.sh live and it worked cleanly; caught a real command-injection bug in a throwaway diff (child_process.exec with unsanitized template-literal input) and then proved it exploitable with an actual PoC that wrote a marker file to disk under /tmp -- that's a VERIFIED-confidence finding, not a guess.

Testato il: 2026-07-15 · Claude Code 2.x (agent harness)

Installazione

git clone https://github.com/ncoevoet/claude-review-all
mkdir -p ~/.claude/skills
cp -r claude-review-all/skills/review-all ~/.claude/skills/review-all

Comandi e prompt di esempio

  • /review-allDiff-scoped review orchestrator with real automated gates, severity/confidence-tagged findings, and a mandatory triage menu.

Gli skill si attivano con richieste in linguaggio naturale, senza comandi da ricordare. Dopo l'installazione, prompt come questi lo attivano (in inglese):

  • Review my uncommitted changes before I open a pull request
  • Do a thorough pre-commit review of my staged diff for bugs and security holes
  • Audit this pull request diff for bugs, security issues, and DRY violations