Index of every page on this site: llms.txt
All skills
juliusbrussee avatar

/caveman-review

@bad48a0
by Julius Brusseejuliusbrussee/caveman114k stars
6,594
Run it yourself

Compressed code review - one line per finding with location, problem and fix. Use for /caveman-review, "review this PR", or "review the diff".

Use this Skill: https://skilld.dev/gh/juliusbrussee/caveman/caveman-review

Nothing lands on disk. Nothing to clean up.

Fork this Skill

Edit a local copy. It keeps the author and licence.

README.md

≈303 tokens on demand. Your agent reads this file only when SKILL.md points to it.

caveman-review

One-line PR comments. Location, problem, fix. No throat-clearing.

What it does

Generates code review comments in L<line>: <severity> <problem>. <fix>. format. One line per finding. Severity emoji: 🔴 bug, 🟡 risk, 🔵 nit, ❓ question. Drops "I noticed that...", hedging, and restating what the diff already shows. Keeps exact line numbers, backticked symbols, and concrete fixes.

Auto-clarity: drops terse mode for CVE-class security findings, architectural disagreements, and onboarding contexts where the author needs the why. Resumes terse for the rest.

Output only — does not approve, request changes, or run linters.

How to invoke

/caveman-review

Also triggers on "review this PR", "code review", "review the diff".

Example output

L42: 🔴 bug: user can be null after .find(). Add guard before .email.
L88-140: 🔵 nit: 50-line fn does 4 things. Extract validate/normalize/persist.
L23: 🟡 risk: no retry on 429. Wrap in withBackoff(3).
L107: ❓ q: why drop the cache here? Reads on next request will miss.

See also

Source: SKILL.md on GitHub

Skill behaviors

No rule matched.

skilld matched fixed text patterns in SKILL.md and file names. Patterns miss obfuscated code.

skilld run checks every file with the same patterns. It asks for approval before it loads a Skill with a behavior marked Needs approval.

Third-party checks

1 warning1mo4 checks · Risk SAFE
  • Gen Agent Trust Hub1mo

    The skill is designed to format code review comments into a terse, one-line format. It operates by reviewing external code diffs, which constitutes an indirect prompt injection surface. However, the skill only generates text output and does not possess capabilities to execute code, access the network, or modify the filesystem, resulting in a low risk profile.

  • Socket1mo

    No alerts

  • Snyk1mo

    Risk: MEDIUM · 1 issue

  • ZeroLeaks6mo

    Score: 93/100 · 2 sections analyzed

Provenance

Signed by skilld at bad48a0. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub last week.

Activeupdated 2 months ago

README badge

README badge for juliusbrussee/caveman/caveman-review