Skip to main content
NeVibeCode · 1,465 items

Skills for Code review and refactoring

Skills for Code review and refactoring: what each one does, an install command and example prompts.

diff-analyze ruvnet skill Analyzes a git diff before a PR, scoring risk, classifying changes, and suggesting reviewer roles. Use it before merging a large change. CX Codex +1 751installs security-scan ruvnet skill Scans a repo at three depths: dependency audit, hard-coded secrets, risky code patterns. Useful before a release or while reviewing a PR. CX Codex +1 748installs mantis-critic official google skill Checks whether validated findings remain triggerable in release builds with assertions disabled. Use it after a finding has already been verified. CX Codex +1 1,600installs mantis-plan official google skill Generates a targeted security review plan based on your threat model and historical findings. Run at the start of a review campaign to map code boundaries and prioritize what to check. CX Codex +1 1,600installs mantis-summarize official google skill Builds a security-focused codebase map with mantis-summary.md files in each directory. Reduces token overhead during planning and research. CX Codex +1 1,600installs mantis-architecture official google skill Turns codebase analysis and collected learnings into an interlinked Markdown knowledge base. Use it at the start of an architecture and vulnerability review loop. CX Codex +1 1,600installs mantis-review official google skill Reviews findings against the actual source code and drops false positives. Useful once a scan has produced a list of bugs that needs cleaning up. CX Codex +1 1,600installs adr-review ruvnet skill Reviews git diffs against accepted Architecture Decision Records to detect violations, forbidden patterns, and architecture drift before merging code. CX Codex +1 745installs trailmark trailofbits skill Builds and inspects multi-language code graphs to trace taint propagation, map attack surfaces, and prioritize security audits. CX Codex +1 4,000installs ddd-validate ruvnet skill Checks bounded context integrity in TypeScript projects and flags domain boundary leaks. Useful for DDD architecture audits and pre-merge CI checks. CX Codex +1 736installs verify Yeachan-Heo skill Turns "it should work" into evidence you can read: which check ran, what passed, and what stayed unverified. CX Codex +1 647installs kg-extract ruvnet skill Extracts entities and relations from source files to build a knowledge graph in AgentDB. Use it to map codebase structure, analyze dependencies, and assess change impact. CX Codex +1 730installs sparc-refine ruvnet skill Runs the Refinement and Completion phases of the SPARC framework. It audits code against specs, raises test coverage to 80%, and verifies release readiness. CX Codex +1 729installs graph-evolution trailofbits skill Compares Trailmark code graphs across two code snapshots to spot structural security changes. It catches attack path expansion and privilege shifts that text diffs overlook. CX Codex +1 3,900installs trailmark-structural trailofbits skill Builds a Trailmark graph for a target directory and reports complexity, taint, blast radius, privilege boundaries, and attack surface data. CX Codex +1 3,900installs trailmark-summary trailofbits skill This skill runs trailmark analyze --summary against a target directory and reports detected languages, entry point count and dependencies. CX Codex +1 3,900installs audit-augmentation trailofbits skill Projects SARIF static analysis reports, weAudit notes, and binary graphs onto Trailmark code graphs. Useful when mapping vulnerabilities to call graphs and data taint paths. CX Codex +1 3,900installs optimizing-ef-core-queries dotnet skill Reviews EF Core data access in services, repositories, imports and background jobs, and points at queries that run slowly, duplicate rows or hit the database too often. CX Codex +1 5,700installs ce-pov EveryInc skill Forms a grounded verdict on whether an external solution, document, or approach fits your project. Judges only by evidence from your codebase and constraints. CX Codex +1 1,000installs gitnexus-taint-analysis abhigyanpatwari skill A skill that teaches the agent GitNexus's CFG/taint/PDG internals: reading findings, adding sources and sinks, editing interprocedural code. CX Codex +1 335installs genotoxic trailofbits skill Sorts survived mutants into false positives, missing unit tests and fuzzing targets, using a code graph built with Trailmark. CX Codex +1 3,800installs salesforce-component-standards official github skill Guides Salesforce UI development across LWC, Aura, and Visualforce. Enforces SLDS 2 compliance, accessibility, and platform security. 770installs play-billing-library-version-upgrade Google LLC skill Walks an Android project from any legacy Google Play Billing Library version to the current stable one. It finds the Gradle dependency itself and rebuilds after every step. CX Codex +1 1,900installs mantis-dedupe official google skill Consolidates duplicate security findings before review. Use it after raw findings exist and several reports may describe the same flaw. CX Codex +1 1,500installs mantis-report official google skill Transforms verified security findings and exploit chains into a professional markdown report. Use at the end of your review cycle to generate stakeholder-facing documentation. CX Codex +1 1,500installs mantis-researcher official google skill Audits production source code against workspace/plan.json. It inspects target files for boundary checks, missing sanitization, and interface violations without modifying the codebase. CX Codex +1 1,600installs react18-dep-compatibility official github skill Checks minimum dependency versions for React 18.3.1 and React 19. Use it during React upgrades and when resolving peer dependency conflicts. 764installs terraform-style-guide hashicorp skill A skill that generates and validates Terraform code according to HashiCorp's official standards. Ensures consistent, secure, and readable HCL across your configurations. CX Codex +1 12,600installs skill-review sanyuan0704 skill Audits Claude Code skills against best practices for structure, token efficiency, and trigger quality. Delivers prioritized fixes with exact line citations. CX Codex +1 2,200installs c-review trailofbits skill Reviews native C/C++ code for memory bugs, integer overflows and races. Use it when auditing userspace applications, daemons or services. CX Codex +1 3,700installs react18-batching-patterns official github skill Diagnoses and fixes React 18 automatic batching bugs in class components. Useful when upgrading from React 17 breaks state assertions or async flows. 754installs uncertainty-and-units K-Dense-AI skill Keeps physical units attached through a calculation and carries measurement uncertainty with pint and uncertainties, then checks that the answer is physically plausible. CX Codex +1 985installs architecture-patterns sickn33 skill Guides backend system design using Clean Architecture, Hexagonal Architecture, and DDD, and assists with monolith decomposition. CX Codex +1 906installs svelte-code-writer sveltejs skill Fetches Svelte 5 documentation and analyzes components using autofixer. Useful when authoring or debugging .svelte and .svelte.ts files. CX Codex +1 12,900installs react-best-practices vercel skill A skill that audits React and Next.js performance: it traces request waterfalls, extra bundle JS, server-client boundary mistakes and wasted rerenders. CX Codex +1 399installs react18-legacy-context official github skill This skill migrates React legacy context to createContext and coordinates the provider with every consumer. Use it for class component context migrations. 745installs gitnexus-pdg-query abhigyanpatwari skill Guides agents on querying program dependence graphs via the GitNexus pdg_query tool. Useful for tracing variable flow and guard conditions in functions. CX Codex +1 323installs cost-booster-edit ruvnet skill Runs simple structural code edits through agent-booster's WASM engine with no LLM call and no token bill. Built for the same transform repeated across a project. CX Codex +1 679installs react18-lifecycle-patterns official github skill Migrates unsafe class component lifecycle methods to React 18.3.1 patterns. Helps prepare legacy code for React 19 before breaking changes arrive. 743installs react18-string-refs official github skill Guides the move from string refs to React.createRef() in class components. Use it when preparing a project for React 18.3.1 or React 19. 741installs

481–520 of 1,465

Narrow it down

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor