Code review and refactoring: skills, plugins, subagents, slash commands and mcp servers

react-best-practices official vercel skill This skill guides agents through performance-focused React and Next.js work. Use it when writing or reviewing components, data fetching, or bundle changes. CX Codex GP ChatGPT 74installs zero-hallucination-coder Alireza Rezvani skill Runs an engineering loop across five strict phases to prevent invented APIs, broken imports, and bloated code. Ideal for schema changes, auth rewrites, and multi-file tasks. Claude Code 69installs lean-comments official github skill Audits source code comments, removes obvious narrative notes, and preserves non-obvious rationale across codebases. GitHub Copilot 17installs view-refactor official OpenAI skill This skill restructures macOS SwiftUI views and scenes. Use it when a large view needs splitting or AppKit boundaries have grown too broad. CX Codex GP ChatGPT 52installs frontend-design-review microsoft skill This skill reviews and creates frontend interfaces with checks for design quality, accessibility, and design-system use. Use it for UI reviews, PRs, and responsive layouts. Claude Code GitHub Copilot 237installs weekly-review Alireza Rezvani skill Runs a GTD-style weekly review for open loops, projects, calendars, and commitments. Use it when a personal task system needs a structured check and a clear next action. Claude Code 47installs md-review Alireza Rezvani skill This skill turns markdown reviews with diff blocks and severity callouts into a two-column HTML page. Use it for a named, shareable review snapshot. Claude Code 46installs markdown-html-orchestrator Alireza Rezvani skill Routes long Markdown documents, code reviews, and slide decks to the right converter, which writes a standalone HTML file. Use it when a document needs a browser-ready format. Claude Code 46installs security-scan official OpenAI skill Runs a single-pass security audit on a repository or selected path. Use it for a general review when there is no diff to inspect. CX Codex GP ChatGPT 39installs resx-source-generator-migration official github skill This skill moves a project from checked-in .Designer.cs files for .resx resources to a source generator. Use it when replacing the existing typed-resource generation setup. GitHub Copilot 10installs stripe-best-practices official OpenAI skill This skill guides Stripe API choices for payments, subscriptions, marketplaces, and financial accounts. Use it when building or reviewing a Stripe integration. CX Codex GP ChatGPT 36installs threat-model official OpenAI skill Builds repository threat models, maps trust boundaries, and outputs threatmodel.md in Codex. CX Codex GP ChatGPT 32installs triage-finding official OpenAI skill Triages external security reports against repository code and SECURITY.md policies, assigning static-evidence verdicts without modifying files. CX Codex GP ChatGPT 30installs security-diff-scan official OpenAI skill Reviews pull requests, commits, and local diffs for security vulnerabilities. Catches risks in modified and deleted code before merging. CX Codex GP ChatGPT 30installs chatgpt-app-submission official OpenAI skill Inspects a ChatGPT Apps MCP server and prepares the submission JSON. Use it before review to collect app info, test cases, and findings. CX Codex GP ChatGPT 29installs deep-security-scan official OpenAI skill This skill runs multiple independent security scans across your entire repository or a scoped path, aggregates findings, and generates a complete report. Use it when standard scanning needs more depth and confidence. CX Codex GP ChatGPT 29installs memory-engineering Alireza Rezvani skill This skill designs and audits agent memory, prices the write path, and enforces forgetting rules. Use it when a CLAUDE.md or memory store keeps growing. Claude Code 29installs superpowers obra plugin The plugin guides an agent from task discussion and planning through subagent development, code review, debugging, and TDD. Use it when the workflow matters. Claude Code CX Codex ★ 304,495repo stars fix-finding official OpenAI skill Resolves confirmed security vulnerabilities through targeted, validated patches. Useful when you need to close an exploit path without breaking existing APIs. CX Codex GP ChatGPT 27installs attack-path-analysis official OpenAI skill Evaluates plausible security findings in Codex and ChatGPT, traces paths from source to sink, and calibrates severity against the repository threat model. CX Codex GP ChatGPT 27installs protobuf-grpc-api-review official github skill Reviews .proto and gRPC changes for format compatibility, migration risks, and RPC contract quality. Use it when changing schemas or investigating failures across client versions. GitHub Copilot 7installs vulnerability-writeup official OpenAI skill Turns vulnerability notes, PoCs, and source code into a checked, self-contained report. Use it to assess one finding or a disclosure campaign. CX Codex GP ChatGPT 25installs finding-discovery official OpenAI skill This skill searches code or changes for plausible security vulnerabilities in the context of a threat model. Use it during finding discovery, not to start a full scan. CX Codex GP ChatGPT 24installs memory-review Alireza Rezvani skill Audits Claude Code auto-memory, finding stale entries, duplicate topics, and candidate rules for CLAUDE.md. Keeps MEMORY.md within its 200-line startup limit. Claude Code 24installs java-upgrade official github skill Guides a Java project through a JDK upgrade and helps adopt newer language features. It covers 11 to 17, 17 to 21, and 21 to 25. GitHub Copilot 6installs mattpocock-skills Matt Pocock plugin A set of skills for grilling, TDD, code review, and specification work. Use it when an agent needs to clarify the task before changing the code. Claude Code ★ 302,251repo stars pw-review Alireza Rezvani skill pw-review audits Playwright tests for anti-patterns, coverage gaps, and weak practices. Use it for one test file, a directory, or the project testDir. Claude Code 19installs design-qa official OpenAI skill A skill for side-by-side design and implementation comparison before handoff. Works with Figma, screenshots, and URLs; catches visual gaps in layout, typography, and interaction states. CX Codex GP ChatGPT 14installs propose-security-hardening official OpenAI skill This skill turns vulnerability evidence and scan findings into architectural hardening options. Use it when a single-finding patch does not address the wider design. CX Codex GP ChatGPT 13installs rebase-current-branch official github skill Rebases the active feature branch onto the latest upstream default branch. Useful when you need to sync changes from main or master before review without losing uncommitted work. GitHub Copilot 3installs pr-address-feedback official github skill This skill steps through pull request review comments one by one, groups repeated patterns, and builds a resolution plan before editing files. Useful for triaging review feedback. GitHub Copilot 2installs human-gate Alireza Rezvani skill Blocks an agent loop until a named person reviews the artifact and signs off on open issues. Claude Code 8installs minimalist Alireza Rezvani skill Stops Claude Code from over-engineering and installing unnecessary packages. It enforces a strict ladder to prioritize standard libraries and existing code. Claude Code 7installs vercel-agent official Vercel Labs skill This skill explains Vercel Agent's PR reviews, incident investigations, and SDK setup. Use it when configuring or evaluating Vercel's development tools. CX Codex GP ChatGPT 4installs define-security-policy official OpenAI skill Helps author, review, and update SECURITY.md files so Codex Security knows project boundaries, invariants, and out-of-scope targets. CX Codex GP ChatGPT 4installs Technical Debt Remediation Plan official github subagent Generates actionable technical debt remediation plans for code and test suites. It helps teams audit accumulated debt without modifying project files. GitHub Copilot ★ 40,369repo stars Software Engineer Agent official github subagent Autonomously writes code to specification, executes tests, and resolves ambiguities without asking for manual confirmations. GitHub Copilot ★ 40,369repo stars sast-sca-security-analyzer official github subagent Runs SAST and SCA scans directly on your codebase. Finds source code vulnerabilities, audits dependency manifests, maps findings to CWE IDs, and drafts fixes. GitHub Copilot ★ 40,369repo stars react18-auditor official github subagent Scans React 16 and 17 class components for deprecations before moving to React 18.3.1. It reads code without editing files and outputs results to .github/react18-audit.md. GitHub Copilot ★ 40,369repo stars Sensei - Junior Mentor official github subagent A Socratic mentor agent that guides junior developers through probing questions instead of handing out answers. It helps beginners understand code and debug issues independently. GitHub Copilot ★ 40,369repo stars