openstack-review — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited openstack-review (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill helps review OpenStack patches from Gerrit with comprehensive analysis and properly formatted output for posting comments back to Gerrit.
Trigger when the user:
Parse the user's message to find the Gerrit change ID. It's typically a number (e.g., 981750).
Determine which OpenStack project you're working with by checking:
This context helps tailor the review to project-specific conventions.
Use git review to download the patch:
git review -d <change-id>This will check out the patch as a local branch.
Perform a comprehensive review across multiple dimensions:
#### Code Quality
#### OpenStack Conventions
#### Tests
#### Documentation
#### Commit Message
Create a plain text report with this structure:
## Review Summary
[Brief overview of the patch - what it does, overall assessment]
### Statistics
- Files changed: X
- Lines added: Y
- Lines removed: Z
### Overall Assessment
[High-level feedback - is this ready to merge, needs work, etc.]
---
## Issues by Severity
### BLOCKING
[Critical issues that must be fixed before merge]
### SUGGESTIONS
[Improvements that should be considered]
### NITS
[Minor style/formatting issues]
---
## Detailed Inline Comments
<filename>:<line-number>: [SEVERITY] <issue description>
Example:
oslo_utils/timeutils.py:42: [BLOCKING] This function doesn't handle timezone-naive datetimes, which could cause a TypeError when calling .astimezone()
oslo_utils/tests/test_timeutils.py:15: [SUGGESTION] Consider adding a test case for negative time deltas
setup.cfg:8: [NIT] Alphabetize dependencies for consistencyImportant formatting rules:
<filename>:<line>: [SEVERITY] <description>After generating the report:
git review or the web UI)git review -d fails, check if git-review is installed and the repository is configured~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.