code-review-hardening — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited code-review-hardening (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Strengthen code against defects through systematic, type-aware review. Every reviewed line is understood or explicitly scoped-out. Findings are classified by severity and fixability. The agent applies direct fixes autonomously and re-reviews before producing a final report.
Passive review is incomplete: A static report is a human review. For an autonomous agent, after classifying findings the skill must enter the self-repair loop — apply fixes, re-review, iterate.
Wrong strategy for the type: A hotfix and a new feature require opposite postures. Applying a full-scope feat review to a hotfix causes unnecessary delay. Always determine the change type first.
Blocking on style preference: Only block on style if the project's style guide explicitly requires it. Personal style preferences are Nit: — never gates.
Skipping lines: Every human-written line must be understood or explicitly scoped-out with a note.
Mentoring vs. blocking: Label every educational comment Mentoring: so the author knows it is not a gate.
Over-engineering: Block implementations that solve future problems the author doesn't know they'll face. Solve today's problem well.
Input: Files or directories to review, optional change type tag
(feat | fix | hotfix | refactor | migrate | docs)
Output: Structured markdown review report with fix status
Workflow:
1. Determine change type (auto-detect or explicit)
2. Gather project context (style guide, conventions, docs)
3. Review per type strategy — read every line
4. Classify findings by severity AND fixability
5. Self-repair loop — apply direct fixes, re-review (max 2 passes)
6. Author review — remaining author-required items
7. Final verdict + escalation if neededLoad this skill when:
review, or review this
Do NOT load this skill for:
Detect the change type in priority order:
feat, fix,hotfix, refactor, migrate, docs). Use directly.
prefixes:
feat/ → featfix/ → fixhotfix/ → hotfixrefactor/ → refactorchore/ → migratedocs/ → docsconventional-commit prefixes (feat:, fix:, hotfix:, refactor:, chore:, docs:). Use the most frequent prefix.
"bug fix" / "fix this" → fix; "hot patch" / "production issue" → hotfix; "restructure" / "clean up" → refactor; "migrate" / "upgrade" → migrate; "update docs" / "add readme" → docs; otherwise → general-purpose review.
general-purpose review across all types.
Before reviewing, gather project context:
STYLEGUIDE.md,.styleguide, style-guide.md, or inline style references).
REVIEW_GUIDELINES.md, CONTRIBUTING.md, or established comment styles).
files.
references/change-type-strategies.md to get the reviewstrategy for the detected type.
If no project conventions are found, proceed with general standards.
Run the type detection chain above.
Read references/change-type-strategies.md for the detected type.
Gather project context: style guide, conventions, relevant docs.
Apply the focused checklist from references/review-checklist.md, adjusting depth per type. For every file: read every line, understand it or note why it was scoped out.
Read references/finding-severity.md to classify each finding:
Step A — Severity:
Step B — Fixability (new):
direct-fix — fix is unambiguous, agent applies it nowauthor-required — fix requires author judgment or is ambiguousinformational — mentoring or good-notice findingApply direct fixes autonomously. Max 2 passes.
Pass 1:
direct-fix blocking finding: apply the fix.blocking findings.
finding as author-required.
fixed.direct-fix items.Pass 2:
direct-fix items.mark as author-required.
After 2 passes, any remaining direct-fix items are marked author-required and escalated via references/escalation.md.
Remaining author-required findings are output in the final report with clear Decision Needed descriptions. The agent does not guess.
author-required blocking findings remain: Request Changesreviewers: Approval with Notes
Any unresolved author-required finding that blocks approval is escalated via references/escalation.md.
| Type | Urgency | Risk | Primary Focus | Secondary | Threshold |
|---|---|---|---|---|---|
feat | Medium | Medium | Design, scalability | Tests, edge cases | Full |
fix | High | Medium | Bug repro, fix verification | Test case | Full |
hotfix | Critical | High | Scope min., correctness | Rollback | Minimal |
refactor | Low | Med-High | Behavioral parity, DRY | Readability | Full |
migrate | Med-High | High | Compat, schema | Migration tests | Full |
docs | Low | Low | Grammar, correctness, code | — | Minimal only |
| General | Medium | Medium | All dimensions equally | — | Full |
For detailed per-type goals, posture, and block-vs-nit guidance, read references/change-type-strategies.md.
| Level | Label | Prefix | Blocks Approval? |
|---|---|---|---|
| Blocking | Must Fix | (no prefix) | Yes |
| Nit | Polish | Nit: | No |
| Mentoring | Educational | Mentoring: | No |
| Approval with Notes | Scoped sign-off | LGTM [with notes]: | No |
Blocking criteria (read references/finding-severity.md for the full decision tree):
testability worsens
error
edge case
Nit criteria:
Mentoring criteria:
Produce this structured markdown report:
# Code Review — {change-type}
**Branch:** {branch-name-or"N/A"}
**Files reviewed:** {n} ({list or "see below"})
**Verdict:** Approve | Request Changes | Approval with Notes
## Summary
{2-3 sentence overall assessment of code health impact}
## Direct Fixes Applied
| File | Line | Finding | Fix Applied | Status |
| ---- | ---- | ------- | ----------- | ------ |
| src/foo.ts | 42 | Null check missing | Add `if (!user) return null;` | fixed |
## Blocking Findings (Author Required)
| File | Line | Finding | Decision Needed | Status |
| ---- | ---- | ------- | -------------- | ------ |
| src/bar.ts | 18 | Inverted condition | Confirm: `> 0` or `< 0`? | pending |
## Nit Findings
| File | Line | Finding | Suggestion | Status |
| ---- | ---- | ------- | ---------- | ------ |
| src/baz.ts | 55 | Non-descriptive name `x` | Rename to `recordCount` | fixed |
## Mentoring / Good Things
| File | Line | Observation |
| ---- | ---- | ----------- |
| src/qux.ts | 12 | Nice early return pattern |
## Escalation Record (if any)
{from references/escalation.md}Fix Status values:
fixed — auto-fixed by the agent in the self-repair looppending — awaiting author decisionescalated — passed to escalation path after max iterationsVerdict definitions:
health and is merge-ready.
author-required blocking findings present.Author must address before approval.
reviewers should address remaining findings. Nits left open by author preference are noted.
Load reference files on demand, not upfront:
| File | When to Load |
|---|---|
references/change-type-strategies.md | Phase 2 of review workflow |
references/review-checklist.md | Phase 4 of review workflow |
references/finding-severity.md | Phase 5 of review workflow |
references/escalation.md | Phase 8 — only when escalation is needed |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.