Review
npx -y skills add rerelurelu/skillbox --skill reviewAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Unified code review using Codex CLI (always) and optionally Cursor Agent CLI. Triggers on: "review", "code review", "review this", "/review" Use when: reviewing implementation plans, architectural designs, or code. Cross-references findings from multiple tools, debates disagreements, filters by severity, and applies fixes.
The file declares its own license as GPL-3.0. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.
SKILL.md
5.1 KB, ~1.2k tokens by cl100k_base, as published. Nobody here has run it
Unified Review
Review code using Codex CLI (always) and optionally Cursor Agent CLI. Cross-reference findings, debate disagreements, filter by severity, and apply fixes.
Commands
Codex (always):
codex exec --full-auto --sandbox read-only --cd <project_directory> "<request>"
Cursor (when enabled):
cursor agent --print --model composer-2 --trust --workspace <project_directory> --mode ask "<request>"
Prompt Rules
Every request sent to Codex or Cursor MUST include both sentences verbatim:
- "No questions or confirmations needed. Proactively output specific proposals, fixes, and code examples."
- "Filter findings by: (1) Critical issues (bugs, security, design flaws), (2) Issues worth fixing that are easy to address. Omit minor nitpicks and style preferences."
Workflow
Phase 0: Delegate to a Background Subagent
External review tools take minutes to respond. Never run them inline in the main conversation — the user's session would block with no visible progress.
If you are the main conversation agent: do not execute Phases 1–6 yourself. Instead:
- Launch a background subagent that inherits the conversation context (Claude Code:
Agenttool withsubagent_type: "fork"). Prompt it with: "You are the review subagent. Read <absolute path to this SKILL.md> and execute its workflow from Phase 1 onward. Scope: <scope from the user's request>. Report findings only — do not modify any files." - Tell the user in one line that the review is running in the background, then return control immediately. Continue other pending work; do not wait for the review.
- When the subagent's completion notification arrives, relay its report to the user as-is (do not re-run the review), then handle fix application per Phase 6.
If you are the review subagent: skip this phase and execute Phases 1–6 directly. Never apply fixes yourself — produce the report only; the main agent owns file changes.
Phase 1: Determine Scope
If $ARGUMENTS specifies files or a scope, use that. Otherwise default to changed files since the last commit:
git diff HEAD --name-only
If the diff is empty, inform the user and stop.
Phase 2: Determine Review Type
Examine the scope and classify:
- Plan — implementation plans, task lists, TODO documents
- Design — architecture docs, design decisions
- Code — source code files (default)
Phase 3: Execute Reviews
- Read
.claude/settings.jsonin the project root. If it contains"cursorEnabled": true, Cursor will also be used. - Compose the review prompt including both mandatory prompt rules.
- Execute:
- Codex only (default): single Bash call
- Codex + Cursor: two independent Bash calls in parallel
Phase 4: Scrutinize and Debate
Review every finding yourself.
When you doubt or disagree with a finding, start a discussion autonomously:
- Quote the specific point from the tool's response
- State your concern or counterargument concretely
- Send a follow-up prompt to that tool, including: "Be frank and direct. Don't hold back — push back candidly." (plus both standard prompt rules)
- Continue until convergence (no round limit)
- Record the outcome
When tools disagree with each other (Codex + Cursor mode):
- Present both positions
- State your own analysis
- Follow up with the tool whose position you find weaker
- Resolve and record
Phase 5: Classify and Filter
Assign severity to each surviving finding:
| Severity | Action | Criteria |
|---|---|---|
| CRITICAL | Must fix | Bugs, security vulnerabilities, data loss, crashes |
| HIGH | Must fix | Design flaws, race conditions, significant logic errors |
| MEDIUM | Consider | Performance, maintainability, minor logic gaps |
| LOW | Skip | Style preferences, minor nitpicks, cosmetic issues |
Drop all LOW findings.
Phase 6: Report and Fix
Report findings to the user:
## レビュー結果
### スコープ
<files reviewed>
### 使用ツール
Codex / Codex + Cursor
---
### CRITICAL
- [ ] <finding with file:line and explanation>
### HIGH
- [ ] <finding with file:line and explanation>
### MEDIUM(検討)
- <finding with brief explanation>
---
### クロスリファレンス(両ツール使用時のみ)
一致: N件 / Codexのみ: N件 / Cursorのみ: N件 / 意見相違(解決済): N件
### 議論結果(議論発生時のみ)
**論点**: <topic>
**対象ツール**: <Codex or Cursor>
**結論**: <resolution and reasoning>
---
### 適用した修正
- <what was changed and why>
Apply fixes:
- CRITICAL and HIGH: apply immediately without asking
- MEDIUM: list for user decision, do not apply automatically
Gives 0 of the 12 instructions most code review skills give in ~1.2k tokens
Counted across 610 of the 674 authors here whose files we hold, read 2026-08-06
- push back with technical reasoning if wrongin 60 of 610, across 24 files
- ask for clarification on unclear itemsin 51 of 610, across 16 files
- fix critical issues immediatelyin 45 of 610, across 29 files
- implement one item at a timein 45 of 610, across 11 files
- group findings by severityin 44 of 610, across 43 files
- verify feedback against the codebasein 42 of 610, across 8 files
- dispatch a code reviewer subagentin 39 of 610, across 23 files
- fix important issues before proceedingin 37 of 610, across 22 files
- test each fix individuallyin 35 of 610, across 7 files
- reply in github comment threadsin 33 of 610, across 5 files
- check for security vulnerabilitiesin 31 of 610, across 27 files
- factualize corrections without over-explainingin 30 of 610, across 2 files
Said here and by no other author read
- include mandatory prompt rules verbatim
- drop low severity findings
- run cursor cli if enabled
- debate disagreements with tools autonomously
- report findings to the user
Grouped from the skills themselves: near-identical wordings counted once, and counted by distinct author, so one author publishing three of these counts once. Length counted with cl100k_base; the agent that loads this file may tokenize it differently.