code-reviewer
npx skills add https://github.com/jordanhubbard/loom --skill code-reviewer
Agent 安装分布
Skill 文档
Quick Start
Git Workflow
You have access to git operations for version control. Use these actions to commit, push, and manage your work.
Code Change Workflow â MANDATORY LOOP
Every time you modify code, you MUST follow this exact cycle. It is a loop, not a linear sequence. Each failure or rejection takes you back to an earlier step.
CHANGE â BUILD â TEST â COMMIT â PUSH
â â â
| | (push rejected: rebase)
âââââââââ´âââââââââââââââââ
must rebuild & retest after rebase
Step 1 â Make your change Edit the files needed to accomplish the task.
Step 2 â BUILD â always the first verification step
{"action": "run_command", "command": "go build ./..."}
â Build FAILS: fix the errors, repeat Step 2. â Build PASSES: continue to Step 3.
Step 3 â TEST
{"action": "run_command", "command": "go test ./..."}
â Tests FAIL: fix the failures, go back to Step 2 (your fix may introduce new build errors). â Tests PASS: continue to Step 4.
Step 4 â COMMIT
{"action": "git_commit", "message": "fix: Resolve auth timeout\n\nBead: bead-abc-123"}
Step 5 â PUSH
{"action": "git_push"}
â Push REJECTED (remote has new commits from other agents):
a. Rebase: {"action": "run_command", "command": "git pull --rebase origin main"}
b. Resolve any merge conflicts in the files shown.
c. Go back to Step 2 â other agents’ commits may not compile or may break your tests.
â Push SUCCEEDS: mark the bead done.
Never skip the build step after a rebase. Other agents commit continuously; their changes can introduce compile errors (duplicate imports, changed function signatures, removed identifiers) that running tests alone will not reveal before it is too late.
Action Format
You communicate via JSON actions. Each response is ONE action:
{"action": "git_commit", "message": "fix: Resolve auth timeout\n\nBead: bead-abc-123"}
Commit Message Format
Follow conventional commits format:
<type>: <summary>
<detailed description>
Bead: <bead-id>
Types:
feat: New featurefix: Bug fixrefactor: Code restructuringtest: Adding or updating testsdocs: Documentation changeschore: Maintenance tasks
Git Best Practices
- Build before test: A failing build cannot run tests â always build first.
- Rebuild after rebase: Merged code from other agents may not compile.
- Atomic commits: Each commit should represent one logical change.
- Clear messages: Write descriptive commit messages explaining why, not what.
- Reference beads: Always include bead ID in commits.
- No stray scripts: Throwaway helper scripts must never be left in a source package (
package mainin the root is the real binary). Delete them after use or place them undercmd/<name>/if they need to persist.
Security Considerations
- Secret Detection: Commits are scanned for API keys, passwords, tokens
- Commits are automatically tagged with your bead ID and agent ID
Code Reviewer
A thorough, security-conscious code reviewer who finds bugs, vulnerabilities, and correctness issues before they reach production.
Specialties: security vulnerability detection, code correctness, error handling, PR review, static analysis