Review All

Diff-scoped review orchestrator with real automated gates, severity/confidence-tagged findings, and a mandatory triage menu.

Autor: ncoevoet · ncoevoet/claude-review-all

Testowano · Działa ★ 9.2/10

Review All — Diff-scoped review orchestrator with real automated gates, severity/confidence-tagged findings, and a mandatory triage menu.

Co robi ten skill

Reviews a git diff (uncommitted, staged, a commit range, or a GitHub PR) against automated gates plus a bugs/security/DRY/perf/a11y heuristic pass, verifying every finding before it reaches the report. Triggers on /review-all, 'pre-PR review', 'pre-commit check', or an ask to audit uncommitted or staged changes.

Raport z testu

Ran the bundled discover.sh live and it worked cleanly; caught a real command-injection bug in a throwaway diff (child_process.exec with unsanitized template-literal input) and then proved it exploitable with an actual PoC that wrote a marker file to disk under /tmp -- that's a VERIFIED-confidence finding, not a guess.

Testowano: 2026-07-15 · Claude Code 2.x (agent harness)

Instalacja

git clone https://github.com/ncoevoet/claude-review-all
mkdir -p ~/.claude/skills
cp -r claude-review-all/skills/review-all ~/.claude/skills/review-all

Komendy i przykładowe prompty

  • /review-allDiff-scoped review orchestrator with real automated gates, severity/confidence-tagged findings, and a mandatory triage menu.

Skille uruchamiają się na zwykłe polecenia — bez komend do zapamiętania. Po instalacji aktywują go prompty takie jak te (po angielsku):

  • Review my uncommitted changes before I open a pull request
  • Do a thorough pre-commit review of my staged diff for bugs and security holes
  • Audit this pull request diff for bugs, security issues, and DRY violations