Skip to main content
NeVibeCode · 1,465 items

Skills for Code review and refactoring

Skills for Code review and refactoring: what each one does, an install command and example prompts.

code-review Donchitos skill A skill that runs architectural review: project standards, SOLID, testability, performance. Useful when you need to go through a file or a whole module. CX Codex +1 452installs m10-performance actionbook skill System guidance for agents to optimize Rust code systematically, focusing on profiling and memory allocation control. CX Codex +1 3,600installs cmdi-command-injection yaklang skill This skill helps find command injection where user input reaches shells, process execution, converters, import pipelines, or blind OOB sinks. CX Codex +1 3,700installs analyzing-ethereum-smart-contract-vulnerabilities mahipal skill Runs static and symbolic analysis on Solidity smart contracts using Slither and Mythril. Catches reentrancy, integer overflows, and access flaws before deployment. CX Codex +1 393installs trailmark-review-gate trailofbits skill The skill runs structural security gates on branches or pull requests using Trailmark graph diffs. It flags removed auth checks, newly reachable sinks, and expanded attack surfaces. CX Codex +1 1,300installs trailmark-variant-neighborhood trailofbits skill This skill expands a suspected vulnerability into related code locations for review. Use it before variant analysis, Semgrep, static analysis, or a manual audit. CX Codex +1 1,300installs trailmark-finding-triage trailofbits skill Builds a graph evidence packet for a single security finding: reachability, entrypoint paths, taint and blast radius. Useful before you spend time on a PoC. CX Codex +1 1,300installs slicing-code-context trailofbits skill Extracts bounded, graph-informed source code slices via Trailmark and delegates analysis to a smaller subagent. Useful when running focused tasks on local or constrained models. CX Codex +1 1,300installs github-triage trailofbits skill This skill reviews a repository’s open GitHub issues and pull requests, links pending fixes to issues, and prepares local priority and change-size estimates. CX Codex +1 1,300installs milestone-review Donchitos skill This skill reviews milestone progress, quality, risks, and go/no-go readiness. Use it at a checkpoint or before a deadline. CX Codex +1 442installs m06-error-handling actionbook skill Guides the AI agent through Rust error handling patterns. Useful when deciding between Result, Option, panic!, thiserror, and anyhow. CX Codex +1 3,500installs smart-contract-vulnerabilities yaklang skill This skill guides Solidity/EVM audits for reentrancy, access control, delegatecall, flash loans, signature replay and MEV attack patterns. CX Codex +1 3,500installs tech-debt Donchitos skill Scans your codebase for tech debt markers, manages a Markdown debt register, and prioritizes issues by impact over fix effort. CX Codex +1 436installs react-component-performance Dimillian skill Identifies React render hotspots, isolates fast-changing state, and eliminates re-render churn. Useful when lists lag or components re-render too often. CX Codex +1 1,100installs ghost-scan-code ghostsecurity skill Finds security flaws in source code: SQL injection, XSS, SSRF and other OWASP categories. Plans the scans first, then runs them per project. CX Codex +1 5,200installs codebase-memory-mcp official github skill Explore unfamiliar code with Codebase Memory: find symbols, relationships and data flows, then check graph-based findings against source files. 259installs architecture-review Donchitos skill Maps GDD requirements to ADRs, flags missing coverage and cross-decision conflicts, and checks architecture against the pinned engine version. CX Codex +1 429installs owasp-security agamm skill A skill that reviews code and diffs for vulnerabilities against OWASP Top 10:2025, ASVS 5.0, and the LLM and agentic risk lists. Useful before a release. CX Codex +1 2,400installs m02-resource actionbook skill Guides AI agents in choosing the right Rust smart pointers and ownership models. Useful when designing data structures or preventing memory leaks. CX Codex +1 3,400installs m05-type-driven actionbook skill This skill helps shape Rust types so invalid states can be rejected by the compiler. Use it for newtypes, type-state APIs, and checked builders. CX Codex +1 3,400installs m01-ownership actionbook skill Guides AI agents through Rust ownership and lifetime errors without spraying .clone() calls across the codebase. CX Codex +1 3,400installs provider-resources hashicorp skill This skill guides Terraform resource and data source work with the Plugin Framework. Use it when adding resources, handling drift, or reviewing provider code. CX Codex +1 4,100installs blast-radius michael-denyer skill Finds what a change breaks elsewhere, beyond the diff. Useful before a merge and when a brief asserts something about existing code. CX Codex +1 889installs skill-scanner getsentry skill Scans agent skills for prompt injection, malicious code, excessive permissions, secret exposure, and supply-chain risks before installation. CX Codex +1 3,800installs m03-mutability actionbook skill A Rust skill for mutability trouble: it walks from borrow-checker errors to a decision about the data, not just another mut. CX Codex +1 3,300installs story-done Donchitos skill Closes a finished story by verifying acceptance criteria, checking for GDD or ADR deviations, and updating sprint tracking files. CX Codex +1 413installs test-evidence-review Donchitos skill This skill reviews test quality and story evidence beyond file existence or passing results. Use it before QA hand-off or a milestone audit. CX Codex +1 410installs optimize-web-animations MengTo skill Pauses offscreen CSS, Canvas, and WebGL animations and fixes frontend memory leaks. Useful when long browser sessions or heavy page effects cause janky scrolling and high CPU load. CX Codex +1 1,700installs modern-cpp trailofbits skill Directs C++ development toward C++20/23/26 idioms, replacing dangerous raw pointers, legacy macros, and SFINAE boilerplate with memory-safe patterns. CX Codex +1 1,200installs writing-lean-proofs trailofbits skill Guides Lean 4 proof writing and review using Mathlib conventions. Use it when formalising theorems, restructuring tactic code, or adding project checks. CX Codex +1 1,200installs perf-code-paths composio-community skill This skill maps likely execution paths, entrypoints, and related files for a performance scenario before profiling. Useful when the hot area is unclear. CX Codex +1 1,600installs perf-theory-gatherer composio-community skill A skill that turns git history and code evidence into up to five hypotheses about a performance problem. CX Codex +1 1,600installs rust-call-graph actionbook skill Builds a Rust function call graph through LSP: who calls a function and what it calls. Useful when reading unfamiliar code or checking what a change will touch. CX Codex +1 3,200installs unsafe-checker actionbook skill Reviews unsafe Rust blocks and FFI boundaries, tracking required SAFETY comments and catching common causes of undefined behavior. CX Codex +1 3,200installs csharp-refactoring dotnet skill A skill that refactors C#/.NET code without changing behavior: it classifies the request first, edits by bindings, then confirms the result with a build and tests. CX Codex +1 1,800installs code-review llama-farm skill Walks the changed lines of a diff looking for leaked secrets, injection, empty catch blocks and placeholder code. Picks the domain from file paths. CX Codex +1 1,200installs no-comments michael-denyer skill Spawns the comment-sicko subagent to scrub obsolete comments and linter suppressions, turning actual code constraints into automated tests or types. CX Codex +1 841installs auto-review-loop wanshuiyin skill Runs an autonomous multi-round research review loop. It applies fixes and queries an external reviewer until reaching the target score or round limit. CX Codex +1 566installs rust-symbol-analyzer actionbook skill An LSP-based skill that maps a Rust codebase: modules, structs, traits, functions. Useful when you open an unfamiliar crate and need the layout fast. CX Codex +1 3,100installs adversarial-reviewer ekreloff skill This skill reviews changes through Saboteur, New Hire, and Security Auditor personas. Use it before merging a PR or when Claude is too agreeable. 813installs

681–720 of 1,465

Narrow it down

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor