What kind of security issues does this skill detect?

It reviews code for common vulnerabilities including SQL injection, XSS, command injection, improper authentication, and exposed secrets or sensitive data.

How does the Code Review Framework verify TDD compliance?

The skill performs a specific phase check that looks for corresponding tests for every function, requests TDD certification, and may even suggest running tests with stashed implementations to verify they fail as expected.

Can I use this for reviewing AI-generated code?

Yes, it is specifically designed to keep 'the ponies on their leads,' ensuring that AI-generated implementations remain high-quality, maintainable, and aligned with project plans.

What is the output format of a review?

The skill produces a structured Markdown report featuring an overall assessment, prioritized issue lists (Critical, Important, Minor), plan alignment analysis, and a TDD compliance summary.

Code Review Framework

Name: Code Review Framework
Author: bacchus-labs

bybacchus-labs

•

Collaboration Tools

Conducts systematic, multi-phase code reviews to ensure implementation alignment, architectural integrity, and strict TDD compliance.

About

The Code Review Framework skill transforms Claude into a Senior Code Reviewer, providing a rigorous, six-phase evaluation process for software implementations. It goes beyond simple linting by analyzing plan alignment, architectural soundness (SOLID principles), security vulnerabilities, and performance bottlenecks. A core strength is its intensive Testing Review phase, which mandates Test-Driven Development (TDD) compliance by verifying RED-GREEN-REFACTOR cycles and ensuring tests genuinely validate behavior. This skill is essential for teams maintaining high-quality standards and ensuring that LLM-generated code meets production requirements.

Key Features

Comprehensive six-phase review covering alignment, quality, architecture, testing, security, and documentation.
Strict TDD compliance verification including certification requests and manual test-failure validation.
Mandatory audit trailing to track skill application throughout the development session.
Prioritized issue categorization identifying Critical, Important, and Minor findings with actionable fixes.
3 GitHub stars
Architectural analysis based on SOLID principles and design pattern best practices.

Use Cases

Automating high-level security and performance audits before merging code into production branches.
Verifying that developers or AI subagents are following rigorous Test-Driven Development (TDD) protocols.
Ensuring feature implementations strictly adhere to original design specifications and technical requirements.

About

Key Features

Comprehensive six-phase review covering alignment, quality, architecture, testing, security, and documentation.
Strict TDD compliance verification including certification requests and manual test-failure validation.
Mandatory audit trailing to track skill application throughout the development session.
Prioritized issue categorization identifying Critical, Important, and Minor findings with actionable fixes.
3 GitHub stars
Architectural analysis based on SOLID principles and design pattern best practices.

Use Cases

Automating high-level security and performance audits before merging code into production branches.
Verifying that developers or AI subagents are following rigorous Test-Driven Development (TDD) protocols.
Ensuring feature implementations strictly adhere to original design specifications and technical requirements.