# review-walkthrough

Turns the current branch diff into an HTML walkthrough with logical steps, explanations and review findings. Run it by hand when you want to read a change properly.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 671 installs · ★ 7805
- Author: trailofbits
- License: CC-BY-SA-4.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/trailofbits/skills/tree/HEAD/plugins/review-walkthrough/skills/review-walkthrough/SKILL.md
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/skills/review-walkthrough

## What it does

The skill takes the branch patch and splits it into steps: related files together, definitions before the code that uses them, tests next to their subjects. Commit order does not drive the reading order — the skill picks whatever is easier to follow. Each step gets an explanation of roughly 50–150 words plus a list of findings with severity levels.

Base branch resolution goes in order: the open PR when its metadata is available, otherwise the repository default from `git symbolic-ref --quiet --short refs/remotes/origin/HEAD`. It will not quietly fall back to `main`; an ambiguous base means it asks. The patch lands in a temp file outside the checkout, and rendering runs through `uv run --no-project {baseDir}/scripts/render_walkthrough.py`. So `uv` has to be on your machine, or the page never gets built.

Review stays read-only. The skill does not run your tests or install dependencies, and it never switches branches. Uncommitted work is excluded from the walkthrough, though it gets mentioned. GitHub metadata only matters for comment export: the page hands you a `gh api` command to copy, and posts nothing itself.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add trailofbits/skills --skill review-walkthrough -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/review-walkthrough/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/review-walkthrough/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add trailofbits/skills --skill review-walkthrough -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/review-walkthrough/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add trailofbits/skills --skill review-walkthrough -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/review-walkthrough/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install trailofbits/skills review-walkthrough
```

2. **Manually: put the files in place**
- File: `.github/skills/review-walkthrough/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add trailofbits/skills --skill review-walkthrough -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/trailofbits/skills --path plugins/review-walkthrough/skills/review-walkthrough
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/review-walkthrough/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add trailofbits/skills --skill review-walkthrough -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/trailofbits/skills/tree/HEAD/plugins/review-walkthrough/skills/review-walkthrough/SKILL.md

## When to use it
- split a large diff into readable steps
- explain what each changed file is for
- surface bugs and security issues with severity
- anchor a finding to a line in the diff
- prepare a branch walkthrough before a teammate reviews it

## Example prompts
- /review-walkthrough:review-walkthrough
- $review-walkthrough
- build a walkthrough for this branch against the release branch

## Similar
- [difit-review](https://affpapa.org/en/nevibecode/skills/difit-review.md) — skill · 1900 installs
- [hunk-review](https://affpapa.org/en/nevibecode/skills/hunk-review.md) — skill · 1800 installs
- [fallow-review](https://affpapa.org/en/nevibecode/skills/fallow-review.md) — skill · 885 installs
- [code-review](https://affpapa.org/en/nevibecode/skills/waybarrios-code-review.md) — skill · 468 installs
- [caveman-review](https://affpapa.org/en/nevibecode/skills/caveman-review.md) — skill · 411800 installs
- [bmad-walkthrough](https://affpapa.org/en/nevibecode/skills/bmad-walkthrough.md) — skill · 11200 installs

From the same set: [trailofbits/skills](https://affpapa.org/en/nevibecode/by/trailofbits/skills.md) — 77 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md