review

Plugin review in b-open-io/prompts. Commands read from the repo's manifest — today.

Skills (7)

• wayfinder

  Plan a huge chunk of work — more than one agent session can hold — as a shared map of decision tickets on your issue tracker, and resolve them one at a time until the way to the destination is clear.

• code-audit-scripts

  Run deterministic code security and quality scans — secret detection, debug artifact cleanup, and TODO/FIXME tracking. Use this skill before any security review, code audit, PR review, or when the user says 'scan for secrets', 'find debug logs', 'check for TODOs', 'audit this code', 'security scan',

• codex-security

  Run OpenAI's agentic security scanner (`@openai/codex-security`) over a repo, PR, or diff, then triage, patch, and gate on its findings. Use for 'run a codex security scan', 'find vulnerabilities in this PR', 'export findings as SARIF', 'fix that security finding', 'compare this scan to the last one

• free-roam-testing

  Explore a running app on randomized unscripted paths to surface new bugs, broken flows, and confusing UX, then file deduplicated tickets. Use for "free roam", "explore the app", "monkey test", "exploratory testing", "find issues I don't know about", or "discovery loop". Respects a never-touch list a

• hunter-skeptic-referee

  This skill should be used when the user asks to 'find bugs', 'do a thorough code review', 'run a security audit', 'hunt for bugs', 'check for correctness issues', or 'review this code for edge cases'. Orchestrates a three-phase adversarial review using three isolated agents — Jerry (Hunter), Kayle (

• visual-proposal

  Produce one self-contained, theme-aware HTML page led by grounded diagrams for work that has not been built. Use for "make a visual proposal", "present these options visually", "diagram the trade-offs", "turn this plan into something reviewable", or a shareable design pitch, RFC, or options comparis

• visual-review

  Turn a PR, branch, commit, or working-tree diff into one self-contained HTML recap page with before/after wireframes, contract summaries, a file map, and annotated diffs. Use for "recap this PR", "visual recap", "review this diff visually", "show me what this branch changed", "critique this change",

Subagents (5)

• architecture-reviewer

  System architecture and large-scale refactoring agent. Use this agent when the user asks to "refactor our microservices architecture", "map the dependencies across our codebase", "review this system design", or needs cross-file analysis spanning many services. Not for code-level security audits (use

• code-auditor

  Code-level security auditor. Use this agent when the user asks to "audit this code for security issues", "review this PR for vulnerabilities", "check for injection risks", or "run a security review before merge", or asks whether a Vercel Security Dashboard finding reflects a code or configuration de

• consolidator

  Codebase cleanup specialist. Use this agent when the user asks to "clean up this repo", "find and merge duplicate functions", "standardize file naming", or "reorganize this codebase" — scattered files, inconsistent naming, or redundant utilities. Updates import paths when moving or renaming. Not for

• security-ops

  Operational and runtime security agent. Use this agent when the user asks to "scan our dependencies for CVEs", "check for leaked secrets", "is this OWASP compliant", "audit our Vercel security posture", or "run a supply chain audit". Covers Vercel Security Dashboard triage, incident response, and SO

• tester

  Test authorship and CI automation specialist. Use this agent when the user asks to "write tests", "add test coverage", "set up e2e/Playwright tests", "fix failing tests", or "add a CI coverage gate", or when a change needs tests before merging. Covers unit, integration, e2e, mocking, and coverage re

Similar plugins