Comprehensive PR review plugin with specialized agents for code quality, security, test coverage, and performance analysis. Works with GitHub, Azure DevOps, Bitbucket, and any git repository.
Plugin pr-reviewer from marketplace xianix-plugins-official in xianix-team/plugins-official. Commands read from the repo's manifest — 10 days ago.
This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.
post-reviewPost the current PR review findings as comments on a pull request. Requires a PR number. Usage: /post-review [pr-number]
review-codeRun a focused code quality review on the current branch. Checks readability, naming, duplication, error handling, and design patterns. Usage: /review-code [branch-name]
review-performanceRun a focused performance review on the current branch. Identifies bottlenecks, N+1 queries, algorithmic inefficiencies, and resource waste. Usage: /review-performance [branch-name]
review-prTrigger a comprehensive PR review. Runs code quality, security, test coverage, and performance analysis. Usage: /review-pr [PR number or branch name]
review-securityRun a focused security review on the current branch. Checks for OWASP Top 10 vulnerabilities, exposed secrets, and insecure patterns. Usage: /review-security [branch-name]
review-testsRun a focused test coverage review on the current branch. Identifies missing tests, coverage gaps, and test quality issues. Usage: /review-tests [branch-name]
/pr-reviewer:pr-reviewRun a full PR review. Analyzes code quality, security, tests, and performance. Works with GitHub, Azure DevOps, Bitbucket, and any git repository. Usage: /pr-review [PR number, branch name, or leave blank for current branch]
code-reviewerExpert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code.
performance-reviewerPerformance-focused code reviewer. Identifies bottlenecks, algorithmic inefficiencies, and resource waste. Use for changes that touch database queries, loops over large datasets, or frequently called code paths.
security-reviewerSecurity-focused code reviewer. Identifies vulnerabilities, exposed secrets, and insecure patterns based on OWASP guidelines. Use after any code change that touches authentication, data handling, or external inputs.
test-reviewerTest quality and coverage reviewer. Analyzes test completeness, quality, and identifies untested code paths. Use to ensure new and modified code is adequately tested before merge.
bash ${CLAUDE_PLUGIN_ROOT}/hooks/validate-prerequisites.sh
bash ${CLAUDE_PLUGIN_ROOT}/hooks/notify-push.sh
AI-native UX mob elaboration workflow for Greenfield and Brownfield projects. Runs structured, human-gated phase processes with artifact guardrails, approval gates, context isolation, and AI readiness checks before any brownfield work begins.
3 skills · 9 commands · 6 agents · hooks
Autonomous codebase archaeology agent. Triggered by a GitHub Issue or Azure DevOps Work Item tagged 'code-archaeology'. Segments the codebase, maps architecture in business language, extracts coding conventions, runs a due diligence audit for defects and structural problems, classifies all work into typed and prioritised items, and delivers a single structured archaeology report as comments on the originating issue or work item.
7 skills · 1 command · 7 agents · hooks
Automated dependency audit and optimization across all major ecosystems (npm, pip, Cargo, Go modules, Maven, .NET, Bundler). Runs four parallel specialized analyses — vulnerability scanning (CVE/CVSS), SemVer version drift, bundle bloat and unused package detection, and license compliance. Automatically creates a pull request with safe fixes applied; flags critical CVEs and major breaking upgrades for manual review. Works with GitHub, Azure DevOps, and any git repository.
6 skills · 1 command · 5 agents · hooks
Automated impact analysis and risk-based test strategy generation for bug fixes, PBIs, and feature implementations. Gathers work item requirements, code changes across linked pull requests, comments, child items, and referenced documentation — then posts a business-readable Markdown comment series on the PR / issue / work item discussion that serves as the testing guide for QA engineers doing risk-based testing. No HTML files written to the repo.
6 skills · 1 command · 5 agents · hooks
Authorized web-application penetration testing with whitebox source-code analysis. Combines OWASP Top 10 dynamic probes (DAST), static code analysis (SAST via semgrep), web-ecosystem dependency CVE scanning, and secrets detection. Source-code recon runs first and drives targeted URL probing — including authenticated routes, real parameter names, and sink locations — instead of blind crawling. Includes a Playwright-driven probe path for SPA targets and DAST+SAST dual-confirmation. Requires explicit --authorized flag.
1 command · 9 agents · hooks
Unified impact analysis and risk-based test strategy plugin. Combines blast radius analysis, dependency tracing, feature mapping, and structured test case generation into a single HTML report. Works from a PR, GitHub issue, or Azure DevOps work item.
1 skill · 1 command · 7 agents · hooks
Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).
39 skills
5 skills + 35 modes + Material Passport pipeline. Includes v3.6.7 cross-model audit gate and v3.6.8 generator-evaluator contract.
5 skills · 16 commands · 4 agents · hooks
Perform AI code review on Git diffs — supports workspace changes, branch ranges, and single commits with concurrent per-file analysis, codebase search, and deep context-aware review.
2 commands
Orchestrate multi-agent teams for parallel code review, hypothesis-driven debugging, and coordinated feature development using Claude Code's Agent Teams
6 skills · 7 commands · 4 agents
Use Codex from Claude Code to review code or delegate tasks.
3 skills · 8 commands · 1 agent · hooks
Write, review, debug, and document LanceDB pipelines in Python and TypeScript that work with both LanceDB Embedded and LanceDB Enterprise.
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.