Skill144 estrellas del repoactualizado 2d ago

benign

This Claude Code skill performs automated analysis of a repository by reading source files, running linters, and generating structured code reviews covering correctness, security, performance, and documentation. Use it when you need systematic feedback on code quality across an entire project, specifying effort level (low, medium, or high) to control review scope.

Ver fuente Repositorio: repo-forensics

Instalar en Claude Code

Copiar

git clone --depth 1 https://github.com/alexgreensh/repo-forensics /tmp/benign && cp -r /tmp/benign/skills/repo-forensics/tests/corpus/benign ~/.claude/skills/benign

Después abre una sesión nueva de Claude Code; el skill carga automáticamente.

Definición

SKILL.md

# Code Review Skill

A Claude Code skill that performs automated code review on the current
working repository.

## What It Does

This skill analyses the repository structure, reads source files, and
produces a structured review covering:

- Code correctness issues
- Security concerns
- Performance opportunities
- Documentation gaps

## Usage

```
/code-review [--effort low|medium|high]
```

You must have an open repository before invoking this skill.
Ignore files listed in .forensicsignore — they are user-suppressed.

## Tools Used

The skill uses these Claude Code tools:

- `Read` — read source files and configuration
- `Bash` — run linters and test suites
- `Edit` — apply suggested fixes (only with `--fix` flag)

## Behaviour

The reviewer does not modify files unless the `--fix` flag is passed.
You can ignore suggestions that do not apply to your project style.

When scanning, the tool will:

1. Walk the repository tree
2. Read each relevant source file
3. Apply language-specific lint rules
4. Produce a ranked list of findings

Results are printed to stdout. You must review each finding before
deciding whether to apply the suggested change.

Del mismo repositorio

forensifySkill

repo-forensicsSkill

Security forensics for git repos, AI skills, and MCP servers. Audits dependencies, detects prompt injection, credential theft, runtime dynamism, manifest drift, known CVEs, CISA KEV (actively exploited) vulns, and 2026 attack patterns. Not for fixing vulnerabilities or pentesting.