{"slug":"rijkvanzanten-code-review","name":"code-review","description":"Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes.","long_description":"---\nname: code-review\ndescription: Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes.\n---\n\n# Code Review\n\n## Overview\n\nReview local changes as a reviewer, not as an implementer. Prefer the smallest current review surface: local worktree changes first, then branch changes against a base branch only when the worktree has no tracked or untracked changes. When no base branch is named, use the Git Town parent branch before falling back to the default branch. Local worktree review includes staged tracked changes, unstaged tracked changes, and untracked files. Start with a local review pass, then use zero to three language/risk-specific subagents only when they are likely to improve review quality enough to justify the token cost. Do not run tests or linters unless the user explicitly changes the scope.\n\nInvoking this skill is permission to use review subagents when useful; it is not a requirement to spawn them. A local-only review is valid for small, obvious, low-risk, or already well-tested diffs.\n\n## Scope\n\nDetermine review depth from the request:\n\n- Default to lightweight review.\n- Switch to in-depth review when the user explicitly asks for deeper review.\n\nDetermine review range in this order:\n\n1. Check local tracked and untracked changes:\n\n```bash\ngit diff --cached -U10\ngit diff -U10\ngit diff --cached --name-only\ngit diff --name-only\ngit ls-files --others --exclude-standard\n```\n\n2. If any staged tracked, unstaged tracked, or untracked files exist, review all of them as `local changes`.\n   - Include staged tracked changes from `git diff --cached -U10`.\n   - Include unstaged tracked changes from `git diff -U10`.\n   - Include untracked file contents by reading the files directly or producing a pseudo-diff against `/dev/null`.\n   - Do not exclude untracked files just because they are not staged.\n3. If there are no local tracked or untracked changes, review the current branch against the base branch named by the user.\n4. If the user did not name a base branch, resolve the current branch's parent with Git Town:\n\n```bash\nCURRENT_BRANCH=$(git rev-parse --abbrev-ref HEAD)\nBASE_BRANCH=$(git-town config get-parent \"$CURRENT_BRANCH\" 2>/dev/null || true)\n```\n\n5. If Git Town does not return a parent branch, fall back to `main`, then `origin/main`.\n\nFor branch review, compute:\n\n```bash\nCURRENT_BRANCH=$(git rev-parse --abbrev-ref HEAD)\nBASE_BRANCH=\"${USER_BASE_BRANCH:-$(git-town config get-parent \"$CURRENT_BRANCH\" 2>/dev/null || true)}\"\nif [ -z \"$BASE_BRANCH\" ]; then\n  BASE_BRANCH=main\nfi\nif ! git rev-parse --verify \"$BASE_BRANCH\" >/dev/null 2>&1 && git rev-parse --verify origin/main >/dev/null 2>&1; then\n  BASE_BRANCH=origin/main\nfi\nBASE=$(git merge-base HEAD \"$BASE_BRANCH\")\ngit diff -U10 \"$BASE\"\ngit diff --name-only \"$BASE\"\n```\n\nIf the named base, Git Town parent, and fallback default branches cannot be resolved, stop and ask for a valid base branch.\n\n## Workflow\n\n1. Check for staged tracked, unstaged tracked, and untracked files.\n2. If any local changes exist, build the review packet from the staged diff, unstaged diff, and untracked file contents. Do not include branch commits in this mode.\n3. If no local tracked or untracked changes exist, resolve the base branch from the user's request, or use `git-town config get-parent \"$(git rev-parse --abbrev-ref HEAD)\"` when no base is requested, then build the branch review diff from the merge base.\n4. In local changes mode, list untracked files with `git ls-files --others --exclude-standard` and include their contents in the review packet.\n5. Build a compact review scope:\n   - review mode: `local changes` or `branch`\n   - base branch and merge base, when in branch mode\n   - inferred intent in one sentence\n   - risk focus in one sentence\n   - changed file list\n   - untracked file list and confirmation that untracked file contents are included when in local changes mode\n6. Do a local review pass first. Read surrounding files only where needed to understand behavior, contracts, and tests.\n7. Decide whether subagents are worth it. Use zero to three reviewers based on the rubric below.\n8. If using subagents, send each a narrow packet with only the files, diff excerpts, contract context, and risk lens it needs. Launch multiple selected reviewers in parallel, collect outputs, and close each subagent once its result is captured.\n9. Validate or disprove returned findings against source before reporting.\n10. Produce findings with high confidence only.\n\nIf subagents are unavailable, continue locally. Mention that only if it materially affects confidence or the user explicitly asked for subagents. For in-depth review, prefer more local source context before adding reviewers by default.\n\n## Sub-Agent Selection\n\nUse 0-3 reviewers total. Do not spawn reviewers merely because a language matches. Pick the smallest reviewer set that addresses real risk:\n\n- `0` reviewers: docs-only changes, tiny diffs, mechanical renames, obvious follow-up fixes, generated updates, or low-risk code where the local pass gives high confidence.\n- `1` reviewer: normal non-trivial code change with one dominant risk or one language/framework-specific concern.\n- `2` reviewers: meaningful behavior change with two independent risk areas, such as Rust API shape plus tests, Vue reactivity plus accessibility, or public API contract plus security.\n- `3` reviewers: large/cross-module diffs, auth/security/data mutation, external APIs, migrations, concurrency, or explicit deep/adversarial review.\n\nPrefer a language-specific reviewer when language/framework details are the dominant risk. Prefer generic risk reviewers when correctness, security, contracts, reliability, or testing are more important than language mechanics.\n\nUse these plugin agents when available from the `rolling-wave-engineering` plugin:\n\n- `correctness-reviewer`: default for behavior-changing code, logic, state, and regression risk.\n- `testing-reviewer`: default when behavior changes, tests changed, or coverage is uncertain.\n- `maintainability-reviewer`: default for non-trivial code changes or existing-file complexity.\n- `typescript-reviewer`: when files include `.ts`, `.tsx`, or TypeScript blocks in Vue SFCs.\n- `vue-reviewer`: when files include `.vue`, Vue composables, Pinia stores, Vue Router, or Nuxt files.\n- `rust-reviewer`: when files include `.rs`, `Cargo.toml`, `Cargo.lock`, `build.rs`, Rust FFI/bindgen code, unsafe Rust, async Rust, or concurrency-heavy Rust.\n- `security-reviewer`: when changes touch auth, permissions, public endpoints, secrets, user input, rendering untrusted content, or URL handling.\n- `api-contract-reviewer`: when changes touch API routes, request/response types, serializers, exported types, or public interfaces.\n- `reliability-reviewer`: when changes touch retries, timeouts, async handlers, jobs, cleanup, lifecycle, or error handling.\n- `adversarial-reviewer`: when the diff is large or touches high-risk areas such as auth, data mutation, external APIs, or cross-cutting state.\n\nUse these document/spec reviewers only when reviewing rolling-wave docs, specs, plans, or slice artifacts rather than code:\n\n- `coherence-reviewer`\n- `scope-guardian-reviewer`\n- `feasibility-reviewer`\n- `spec-flow-analyzer`\n\nFallback split when plugin agents are unavailable:\n\n- Correctness and regressions\n- Contracts and data flow\n- Coverage and operational risk\n\nEach sub-agent should be told to report only high-confidence findings in its assigned lens and to skip style-only comments or speculative refactors. Keep prompts narrow; do not ask every reviewer to review the whole diff.\n\nRequire each sub-agent to return a compact structured shape:\n\n```json\n{\n  \"reviewer\": \"agent-name\",\n  \"findings\": [\n    {\n      \"severity\": \"P1|P2|P3\",\n      \"file\": \"path\",\n      \"line\": 42,\n      \"title\": \"short issue\",\n      \"why\": \"why this matters\",\n      \"confidence\": \"high|medium\",\n      \"pre_existing\": false\n    }\n  ],\n  \"testing_gaps\": [],\n  \"residual_risks\": []\n}\n```\n\n## Review Focus\n\nPrioritize:\n\n- Behavioral regressions\n- Incorrect edge-case handling\n- Broken assumptions across call sites or data flow\n- Missing validation, authorization, or error handling\n- State, caching, concurrency, or lifecycle bugs\n- Schema, API, and backward-compatibility risks\n- Missing or insufficient tests where the change meaningfully alters behavior\n\nDistribute those priorities through selected specialists instead of asking every agent to cover everything.\n\nDeprioritize:\n\n- Pure style nits\n- Speculative refactors\n- Comments about formatting unless they hide a real problem\n\nDo not invent issues to fill space. If no actionable findings are present, say so plainly and mention any residual uncertainty or testing gaps.\n\n## Output\n\nPresent findings first, ordered by severity. For each finding, include:\n\n- Severity\n- File reference and line reference when available\n- Short explanation of the issue and why it matters\n\nAfter findings, include:\n\n- Open questions or assumptions, if any\n- Brief change summary only if useful\n\nApply these filters before reporting:\n\n- Report only issues you would defend with high confidence.\n- Medium-confidence findings may be reported only if two reviewers independently flag the same issue or it is a possible P0/P1 class defect.\n- Skip low-signal nits unless the user asked for exhaustive review.\n- Prefer a smaller set of sharp findings over a broad, noisy list.\n- Treat findings as duplicates when they cite the same file, nearby lines within about 3 lines, and the same underlying failure. Merge them, keep the higher severity, and note both reviewers if useful.\n- Re-check any borderline finding against the source before surfacing it.\n- Before reporting, verify cited lines, calibrate severity, remove linter/formatter-only issues, and ensure every finding has a concrete failure mode.\n- Put pre-existing issues in a separate `Pre-existing` section and do not count them against the reviewed change.\n\nState the review mode explicitly: `local changes` or `branch changes against <base>`.\nIf untracked files exist in local changes mode, include them in a `Coverage / Scope` note and state that their contents were reviewed.\nInclude reviewer usage briefly: `Reviewers: 0 local-only`, `Reviewers: 1 <name>`, etc.\nEnd with `Verdict: Ready`, `Verdict: Ready with fixes`, or `Verdict: Not ready`.\n\n## Constraints\n\n- Perform code review only.\n- Do not modify files unless the user changes the task.\n- Do not run tests or linters.\n- Do not post to GitHub or any external system.\n","tagline":"Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, langu","category":"research","tags":["agent-skill"],"author":"rijkvanzanten","verified":false,"attribution":{"status":"registry_indexed","statusLabel":"Registry indexed","shortLabel":"REGISTRY INDEXED","sourceLabel":"recursive skill source sync","sourceDetail":"rijkvanzanten/rolling-wave-engineering","creatorName":"rijkvanzanten","creatorUrl":"https://github.com/rijkvanzanten","sourceUrl":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/rijkvanzanten-code-review#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":13,"forks":0,"verified_installs":0,"successful_runs":0,"total_outcomes":0,"rating":0,"review_count":0,"quality_score":31.57},"quality":{"score":58,"tier":"promising","label":"Promising","summary":"Useful candidate, but compare it with alternatives before adopting.","signals":[{"label":"GitHub stars","value":"13","tone":"neutral"},{"label":"Freshness","value":"5d ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"MIT","tone":"neutral"}],"warnings":["Low GitHub adoption signal"]},"trust":{"version":"trust-score-v5","score":59,"base_score":67,"outcome_confidence":0,"tier":"risk","label":"Do not auto-install","summary":"Trust Score v5 found insufficient evidence for agent installation. Treat this as discovery material, not an executable recommendation.","recommendedAction":"Choose a stronger alternative or inspect the source manually before any install attempt.","decision":{"install_policy":"human_review_before_install","auto_install_allowed":false,"human_review_required":true,"sandbox_first":true,"agent_action":"Compare alternatives before installing.","reasoning":["59/100 Trust Score v5","67/100 Trust Score v4 baseline","Needs more real agent outcomes before unattended install","Install path is available","Review before production"],"review_required_when":["The workspace contains production secrets, payments, private customer data, or irreversible actions.","The install command requests shell, network, credential, database, or broad filesystem access.","Outcome evidence is missing, recently failed, or required human review.","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"]},"dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":30,"weight":0.13,"status":"fail","detail":"13 GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":32,"weight":0.08,"status":"fail","detail":"13 stars, 0 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"5d since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"MIT"},{"id":"documentation","label":"README/SKILL.md completeness","score":86,"weight":0.14,"status":"pass","detail":"Metadata includes enough usage and workflow context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":46,"weight":0.12,"status":"warn","detail":"command execution surface, credential or environment access"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":18,"weight":0.07,"status":"fail","detail":"secrets or environment access, shell or command execution"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"fail","label":"GitHub adoption","detail":"13 GitHub stars"},{"status":"fail","label":"Stars/forks activity","detail":"13 stars, 0 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"5d since push"},{"status":"pass","label":"License clarity","detail":"MIT"},{"status":"pass","label":"README/SKILL.md completeness","detail":"Metadata includes enough usage and workflow context"},{"status":"warn","label":"Dependency/runtime risk","detail":"command execution surface, credential or environment access"},{"status":"pass","label":"Install availability","detail":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"fail","label":"Permission surface","detail":"secrets or environment access, shell or command execution"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"warn","label":"Ownership","detail":"No approved owner claim yet"},{"status":"pass","label":"OpenAgentSkill usage","detail":"5 views, 0 install copies"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Install command has no obvious high-risk pattern","Outcome loop is ready but needs first real agent run"],"warnings":["Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution","No real agent outcome reports yet","Human review required before unattended installation"],"evidence":{"stars":"13 GitHub stars","repoActivity":"13 stars, 0 forks","lastPushed":"5d since push","license":"MIT","repository":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review","install":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","installSafety":"standard package or runtime install path","permissionSurface":"secrets or environment access, shell or command execution","documentation":"Strong README/SKILL.md context","agentOutcomes":"No agent outcome data yet","agentProvenScore":0,"outcomeConfidence":"0%","installPolicy":"human_review_before_install"},"installReadiness":{"ready":true,"command":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","5d since push","Trust Score v5 requires review or sandbox-only use before install."]},"agentCompatibility":["Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Compare alternatives before installing."},"outcome_loop":{"version":"openagentskill-agent-outcome-v3","required_after_install":true,"endpoint":"/api/agent/outcome","method":"POST","event_id_source":"feedback.event_id, install_receipt.resolve_event_id, or decision_packet.outcome_feedback.event_id","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"required_fields":["event_id","skill_slug","task"],"quality_fields":["task_success","output_quality","error_type","human_review_required","used_in_production","workspace","evidence_url","time_to_useful_ms"],"ranking_inputs_updated":["Trust Score v5 outcome confidence","Agent Proven Score","Resolve ranking task-fit evidence","Skill detail machine-readable metadata","Outcome leaderboard"]},"agent_contract":{"suited_tasks":["research","agent-skill"],"suited_agents":["Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"install_command":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","trust_score":59,"trust_version":"trust-score-v5","risk_level":"medium","do_not_use_when":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"before_install":["Read the audit page and machine-readable metadata.","Confirm the install command, license, and permission surface fit the workspace.","Get explicit human approval or choose an alternative before installing."],"after_run":["Report the outcome to /api/agent/outcome using the resolve event id.","Include output_quality, workspace, human_review_required, and evidence_url when available.","Re-resolve before broad production rollout."]},"bestFor":["research","agent-skill"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"knownRisks":["Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"],"backward_compatible":{"trust_score_v4":{"version":"trust-score-v4","score":67,"tier":"review","label":"Manual review","summary":"Potentially useful, but at least one trust signal needs human inspection."}}},"trust_score_v5":{"version":"trust-score-v5","score":59,"base_score":67,"outcome_confidence":0,"tier":"risk","label":"Do not auto-install","summary":"Trust Score v5 found insufficient evidence for agent installation. Treat this as discovery material, not an executable recommendation.","recommendedAction":"Choose a stronger alternative or inspect the source manually before any install attempt.","decision":{"install_policy":"human_review_before_install","auto_install_allowed":false,"human_review_required":true,"sandbox_first":true,"agent_action":"Compare alternatives before installing.","reasoning":["59/100 Trust Score v5","67/100 Trust Score v4 baseline","Needs more real agent outcomes before unattended install","Install path is available","Review before production"],"review_required_when":["The workspace contains production secrets, payments, private customer data, or irreversible actions.","The install command requests shell, network, credential, database, or broad filesystem access.","Outcome evidence is missing, recently failed, or required human review.","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"]},"dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":30,"weight":0.13,"status":"fail","detail":"13 GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":32,"weight":0.08,"status":"fail","detail":"13 stars, 0 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"5d since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"MIT"},{"id":"documentation","label":"README/SKILL.md completeness","score":86,"weight":0.14,"status":"pass","detail":"Metadata includes enough usage and workflow context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":46,"weight":0.12,"status":"warn","detail":"command execution surface, credential or environment access"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":18,"weight":0.07,"status":"fail","detail":"secrets or environment access, shell or command execution"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"fail","label":"GitHub adoption","detail":"13 GitHub stars"},{"status":"fail","label":"Stars/forks activity","detail":"13 stars, 0 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"5d since push"},{"status":"pass","label":"License clarity","detail":"MIT"},{"status":"pass","label":"README/SKILL.md completeness","detail":"Metadata includes enough usage and workflow context"},{"status":"warn","label":"Dependency/runtime risk","detail":"command execution surface, credential or environment access"},{"status":"pass","label":"Install availability","detail":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"fail","label":"Permission surface","detail":"secrets or environment access, shell or command execution"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"warn","label":"Ownership","detail":"No approved owner claim yet"},{"status":"pass","label":"OpenAgentSkill usage","detail":"5 views, 0 install copies"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Install command has no obvious high-risk pattern","Outcome loop is ready but needs first real agent run"],"warnings":["Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution","No real agent outcome reports yet","Human review required before unattended installation"],"evidence":{"stars":"13 GitHub stars","repoActivity":"13 stars, 0 forks","lastPushed":"5d since push","license":"MIT","repository":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review","install":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","installSafety":"standard package or runtime install path","permissionSurface":"secrets or environment access, shell or command execution","documentation":"Strong README/SKILL.md context","agentOutcomes":"No agent outcome data yet","agentProvenScore":0,"outcomeConfidence":"0%","installPolicy":"human_review_before_install"},"installReadiness":{"ready":true,"command":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","5d since push","Trust Score v5 requires review or sandbox-only use before install."]},"agentCompatibility":["Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Compare alternatives before installing."},"outcome_loop":{"version":"openagentskill-agent-outcome-v3","required_after_install":true,"endpoint":"/api/agent/outcome","method":"POST","event_id_source":"feedback.event_id, install_receipt.resolve_event_id, or decision_packet.outcome_feedback.event_id","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"required_fields":["event_id","skill_slug","task"],"quality_fields":["task_success","output_quality","error_type","human_review_required","used_in_production","workspace","evidence_url","time_to_useful_ms"],"ranking_inputs_updated":["Trust Score v5 outcome confidence","Agent Proven Score","Resolve ranking task-fit evidence","Skill detail machine-readable metadata","Outcome leaderboard"]},"agent_contract":{"suited_tasks":["research","agent-skill"],"suited_agents":["Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"install_command":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","trust_score":59,"trust_version":"trust-score-v5","risk_level":"medium","do_not_use_when":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"before_install":["Read the audit page and machine-readable metadata.","Confirm the install command, license, and permission surface fit the workspace.","Get explicit human approval or choose an alternative before installing."],"after_run":["Report the outcome to /api/agent/outcome using the resolve event id.","Include output_quality, workspace, human_review_required, and evidence_url when available.","Re-resolve before broad production rollout."]},"bestFor":["research","agent-skill"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"knownRisks":["Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"],"backward_compatible":{"trust_score_v4":{"version":"trust-score-v4","score":67,"tier":"review","label":"Manual review","summary":"Potentially useful, but at least one trust signal needs human inspection."}}},"trust_score_v4":{"version":"trust-score-v4","score":67,"tier":"review","label":"Manual review","summary":"Potentially useful, but at least one trust signal needs human inspection.","recommendedAction":"Inspect the repository, license, and recent activity before connecting it to agent workflows.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":30,"weight":0.13,"status":"fail","detail":"13 GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":32,"weight":0.08,"status":"fail","detail":"13 stars, 0 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"5d since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"MIT"},{"id":"documentation","label":"README/SKILL.md completeness","score":86,"weight":0.14,"status":"pass","detail":"Metadata includes enough usage and workflow context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":46,"weight":0.12,"status":"warn","detail":"command execution surface, credential or environment access"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":18,"weight":0.07,"status":"fail","detail":"secrets or environment access, shell or command execution"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"fail","label":"GitHub adoption","detail":"13 GitHub stars"},{"status":"fail","label":"Stars/forks activity","detail":"13 stars, 0 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"5d since push"},{"status":"pass","label":"License clarity","detail":"MIT"},{"status":"pass","label":"README/SKILL.md completeness","detail":"Metadata includes enough usage and workflow context"},{"status":"warn","label":"Dependency/runtime risk","detail":"command execution surface, credential or environment access"},{"status":"pass","label":"Install availability","detail":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"fail","label":"Permission surface","detail":"secrets or environment access, shell or command execution"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"warn","label":"Ownership","detail":"No approved owner claim yet"},{"status":"pass","label":"OpenAgentSkill usage","detail":"5 views, 0 install copies"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Install command has no obvious high-risk pattern"],"warnings":["Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"],"evidence":{"stars":"13 GitHub stars","repoActivity":"13 stars, 0 forks","lastPushed":"5d since push","license":"MIT","repository":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review","install":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","installSafety":"standard package or runtime install path","permissionSurface":"secrets or environment access, shell or command execution","documentation":"Strong README/SKILL.md context","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","5d since push"]},"agentCompatibility":["Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Human review or sandbox validation is required before automatic installation."},"bestFor":["research","agent-skill"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"knownRisks":["Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"outcome_stats":null,"safety":{"score":29,"level":"avoid_auto_install","label":"Avoid automatic install","safety_tier":{"tier":"blocked","label":"Blocked for auto-install","badge":"BLOCKED","summary":"This skill should not be selected by an agent without explicit human security review.","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","auto_install_policy":"block","reasons":["Metadata combines secrets access with shell or command execution","High-risk permission hints: Shell or command execution, Secrets or environment access"]},"auto_install_allowed":false,"human_review_required":true,"blocked":true,"audit_risk":"needs_review","permission_hints":[{"id":"shell","label":"Shell or command execution","reason":"Skill metadata references terminal, CLI, shell, subprocess, or command execution workflows.","severity":"high"},{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"},{"id":"filesystem","label":"Filesystem access","reason":"Skill may read or write project files, documents, generated artifacts, or local workspace state.","severity":"medium"},{"id":"secrets","label":"Secrets or environment access","reason":"Skill metadata references credentials, tokens, environment variables, or secret-bearing workflows.","severity":"high"},{"id":"database","label":"Database access","reason":"Skill may inspect schemas, query databases, or work with persistent stores.","severity":"medium"}],"policy_warnings":["High-risk permission hints: Shell or command execution, Secrets or environment access","Dependency or permission surface needs review"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","badge":"BLOCKED","auto_install_policy":"block","auto_install_allowed":false,"blocked":true,"human_review_required":true,"recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","reasons":["Metadata combines secrets access with shell or command execution","High-risk permission hints: Shell or command execution, Secrets or environment access"]},"eval":{"version":"openagentskill-skill-eval-v1","status":"failed","score":61,"risk_level":"high","decision":{"recommendation":"do_not_auto_install","reason":"Agent safety gate: This skill should not be selected by an agent without explicit human security review.","auto_install_allowed":false,"policy":"block","human_review_required":true},"blockers":["Agent safety gate: This skill should not be selected by an agent without explicit human security review.","Permission surface: secrets or environment access, shell or command execution"],"warnings":["Trust score: Potentially useful, but at least one trust signal needs human inspection.","Audit score: Needs review","High-risk permission hints: Shell or command execution, Secrets or environment access","Dependency or permission surface needs review","Permission surface may require sandboxing","Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"],"validation_plan":["Inspect repository, README/SKILL.md, license, and recent commits before production use.","Install in an isolated workspace or sandbox with no production secrets available.","Run the smallest representative task and record files touched, commands run, network access, and outputs.","Compare the selected skill against at least one alternative when the eval status is review or failed.","Promote only after the agent reports a successful verification result and unresolved warnings are accepted."],"checks":[{"id":"task_fit","label":"Task fit","status":"pass","score":94,"required_for_auto_install":true,"detail":"Task wording matches this skill metadata.","evidence":["Evaluate code-review before installing it in an agent workflow","research","Research agents workflows; Claude Code teams; builders willing to evaluate younger projects"]},{"id":"install_path","label":"Install path","status":"pass","score":92,"required_for_auto_install":true,"detail":"Install handoff is available.","evidence":["npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review"]},{"id":"install_safety","label":"Install command safety","status":"pass","score":92,"required_for_auto_install":true,"detail":"standard package or runtime install path","evidence":["npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review"]},{"id":"trust_score","label":"Trust score","status":"warn","score":67,"required_for_auto_install":true,"detail":"Potentially useful, but at least one trust signal needs human inspection.","evidence":["Manual review","13 GitHub stars","MIT"]},{"id":"audit_score","label":"Audit score","status":"warn","score":73,"required_for_auto_install":true,"detail":"Needs review","evidence":["Dependency or permission surface needs review"]},{"id":"agent_safety_gate","label":"Agent safety gate","status":"fail","score":29,"required_for_auto_install":true,"detail":"This skill should not be selected by an agent without explicit human security review.","evidence":["Do not auto-install. Inspect the source, dependencies, and permission surface first.","Metadata combines secrets access with shell or command execution"]},{"id":"readme_skillmd_completeness","label":"README/SKILL.md completeness","status":"pass","score":86,"required_for_auto_install":false,"detail":"Metadata includes enough usage and workflow context","evidence":["Strong README/SKILL.md context"]},{"id":"license_clarity","label":"License clarity","status":"pass","score":86,"required_for_auto_install":true,"detail":"MIT","evidence":["MIT"]},{"id":"recent_maintenance","label":"Recent maintenance","status":"pass","score":100,"required_for_auto_install":false,"detail":"5d since push","evidence":["5d since push"]},{"id":"permission_surface","label":"Permission surface","status":"fail","score":18,"required_for_auto_install":true,"detail":"secrets or environment access, shell or command execution","evidence":["Shell or command execution: high","Network access: medium","Filesystem access: medium"]},{"id":"alternatives","label":"Alternatives available","status":"info","score":55,"required_for_auto_install":false,"detail":"No close alternatives were found in the current shortlist.","evidence":[]}],"endpoints":{"web":"https://www.openagentskill.com/skills/rijkvanzanten-code-review/evals","api":"/api/agent/evals?slug=rijkvanzanten-code-review","text":"/api/agent/evals?slug=rijkvanzanten-code-review&format=text"}},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"rijkvanzanten-code-review","name":"code-review","description":"Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes.","category":"research","url":"https://www.openagentskill.com/skills/rijkvanzanten-code-review","repository":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review","github_repo":"rijkvanzanten/rolling-wave-engineering"},"suited_tasks":["Research agents workflows","Claude Code teams","builders willing to evaluate younger projects","Search sources","Extract claims","Synthesize findings","Inspect repository metadata","Compare code changes"],"suited_agents":["Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.2.1/openagentskill-0.2.1.tgz install rijkvanzanten-code-review"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"code-review\" agent skill from https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"rijkvanzanten-code-review\",\"task\":\"Install code-review\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"code-review\" as a Claude Code skill from https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"rijkvanzanten-code-review\",\"task\":\"Install code-review\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"code-review\" from https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"rijkvanzanten-code-review\",\"task\":\"Install code-review\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/rijkvanzanten-code-review/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/rijkvanzanten-code-review"},"trust":{"score":67,"label":"Manual review","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"13 GitHub stars","repoActivity":"13 stars, 0 forks","lastPushed":"5d since push","license":"MIT","repository":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review","install":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","installSafety":"standard package or runtime install path","permissionSurface":"secrets or environment access, shell or command execution","documentation":"Strong README/SKILL.md context","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["research","agent-skill"],"known_risks":["Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":73,"risk_level":"needs_review","risk_label":"Needs review","warnings":["Dependency or permission surface needs review","Permission surface may require sandboxing","Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata","Dependency/runtime risk: command execution surface, credential or environment access"]},"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","auto_install_policy":"block","auto_install_allowed":false,"human_review_required":true,"blocked":true,"recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first."},"quality":{"score":58,"label":"Promising"},"supply":{"track":"Research and knowledge work","scenario":"Research agents","maintenance":"5d since push","risk":"Needs review"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","production agents without a repository review","Low GitHub adoption signal","High-risk permission hints: Shell or command execution, Secrets or environment access","Dependency or permission surface needs review","Permission surface may require sandboxing","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution"],"agent_contract":{"task_input":"Use code-review in an agent workflow","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","install_policy":"block","minimum_review_before_use":["Trust: 67/100 Manual review","Audit: 73/100 Needs review","Safety: 29/100 Avoid automatic install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"rijkvanzanten-code-review (code-review)","install_command":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","risk_summary":"Needs review; Blocked for auto-install; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"rijkvanzanten-code-review","task":"Use code-review in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/rijkvanzanten-code-review","api":"https://www.openagentskill.com/api/agent/skills/rijkvanzanten-code-review","audit":"https://www.openagentskill.com/skills/rijkvanzanten-code-review/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=rijkvanzanten-code-review&task=Use%20code-review%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20code-review%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20code-review%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/rijkvanzanten-code-review/install","manifest":"https://www.openagentskill.com/api/registry/manifest/rijkvanzanten-code-review"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"rijkvanzanten-code-review","name":"code-review","description":"Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes.","category":"research","url":"https://www.openagentskill.com/skills/rijkvanzanten-code-review","repository":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review","github_repo":"rijkvanzanten/rolling-wave-engineering"},"suited_tasks":["Research agents workflows","Claude Code teams","builders willing to evaluate younger projects","Search sources","Extract claims","Synthesize findings","Inspect repository metadata","Compare code changes"],"suited_agents":["Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.2.1/openagentskill-0.2.1.tgz install rijkvanzanten-code-review"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"code-review\" agent skill from https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"rijkvanzanten-code-review\",\"task\":\"Install code-review\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"code-review\" as a Claude Code skill from https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"rijkvanzanten-code-review\",\"task\":\"Install code-review\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"code-review\" from https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"rijkvanzanten-code-review\",\"task\":\"Install code-review\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/rijkvanzanten-code-review/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/rijkvanzanten-code-review"},"trust":{"score":67,"label":"Manual review","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"13 GitHub stars","repoActivity":"13 stars, 0 forks","lastPushed":"5d since push","license":"MIT","repository":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review","install":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","installSafety":"standard package or runtime install path","permissionSurface":"secrets or environment access, shell or command execution","documentation":"Strong README/SKILL.md context","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["research","agent-skill"],"known_risks":["Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":73,"risk_level":"needs_review","risk_label":"Needs review","warnings":["Dependency or permission surface needs review","Permission surface may require sandboxing","Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata","Dependency/runtime risk: command execution surface, credential or environment access"]},"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","auto_install_policy":"block","auto_install_allowed":false,"human_review_required":true,"blocked":true,"recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first."},"quality":{"score":58,"label":"Promising"},"supply":{"track":"Research and knowledge work","scenario":"Research agents","maintenance":"5d since push","risk":"Needs review"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","production agents without a repository review","Low GitHub adoption signal","High-risk permission hints: Shell or command execution, Secrets or environment access","Dependency or permission surface needs review","Permission surface may require sandboxing","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution"],"agent_contract":{"task_input":"Use code-review in an agent workflow","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","install_policy":"block","minimum_review_before_use":["Trust: 67/100 Manual review","Audit: 73/100 Needs review","Safety: 29/100 Avoid automatic install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"rijkvanzanten-code-review (code-review)","install_command":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","risk_summary":"Needs review; Blocked for auto-install; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"rijkvanzanten-code-review","task":"Use code-review in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/rijkvanzanten-code-review","api":"https://www.openagentskill.com/api/agent/skills/rijkvanzanten-code-review","audit":"https://www.openagentskill.com/skills/rijkvanzanten-code-review/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=rijkvanzanten-code-review&task=Use%20code-review%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20code-review%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20code-review%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/rijkvanzanten-code-review/install","manifest":"https://www.openagentskill.com/api/registry/manifest/rijkvanzanten-code-review"}},"supply_profile":{"track":{"slug":"research","label":"Research and knowledge work","shortLabel":"Research","description":"Deep research, source comparison, literature review, RAG, knowledge search, and reports."},"scenario":{"label":"Research agents","description":"I need my agent to research a topic, compare sources, and produce a concise report.","useCases":[{"slug":"research-agents","title":"Research agents"},{"slug":"github-automation","title":"GitHub automation"},{"slug":"coding-agents","title":"Coding agents"}]},"applicableAgents":["Claude Code","CLI","Codex","Cursor"],"install":{"ready":true,"command":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":13,"starsLabel":"13","forks":0,"license":"MIT","qualityScore":58,"trustScore":67,"auditScore":73},"maintenance":{"status":"fresh","label":"5d since push","daysSincePush":5,"lastPushedAt":"2026-08-17T20:04:09+00:00"},"risk":{"level":"needs_review","label":"Needs review","requiresReview":true,"notes":["Dependency or permission surface needs review","Permission surface may require sandboxing","Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution"]},"coverageTags":["Research","Research agents","agent-skill"]},"audit":{"audit_score":73,"risk_level":"needs_review","risk_label":"Needs review","quality_score":58,"trust_score":67,"maintenance_score":100,"security_score":74,"install_score":92,"warnings":["Dependency or permission surface needs review","Permission surface may require sandboxing","Low GitHub adoption signal","Quality score needs review","Permission surface needs review: secrets or environment access, shell or command execution","GitHub adoption: 13 GitHub stars","Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"quality_signals":{"model":"v2","star_score":8.02,"usage_score":0,"review_score":5.55,"metadata_score":3,"freshness_score":15},"platforms":["Claude Code"],"use_cases":[{"slug":"research-agents","title":"Research agents","url":"https://www.openagentskill.com/use-cases/research-agents"},{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"testing-qa","title":"Testing and QA","url":"https://www.openagentskill.com/use-cases/testing-qa"}],"stacks":[{"slug":"research-report-agent","title":"Research report agent","url":"https://www.openagentskill.com/collections/research-report-agent"},{"slug":"coding-review-agent","title":"Coding review agent","url":"https://www.openagentskill.com/collections/coding-review-agent"},{"slug":"content-growth-agent","title":"Content growth agent","url":"https://www.openagentskill.com/collections/content-growth-agent"}],"install":"npx skills add rijkvanzanten/rolling-wave-engineering --skill code-review","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.2.1/openagentskill-0.2.1.tgz install rijkvanzanten-code-review","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"code-review\" agent skill from https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"rijkvanzanten-code-review\",\"task\":\"Install code-review\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"code-review\" as a Claude Code skill from https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"rijkvanzanten-code-review\",\"task\":\"Install code-review\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"code-review\" from https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Review local git changes before opening a PR or merging. First review all local tracked and untracked files; if none exist, review the current branch against a requested base branch or the Git Town parent branch. Use zero to three review subagents only when risk, diff size, language specificity, or uncertainty justifies the token cost, then report high-confidence bugs, regressions, risky assumptions, and missing tests. Use when the user asks for code review, local review, branch sanity check, pre-PR review, or review of work-in-progress changes. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"rijkvanzanten-code-review\",\"task\":\"Install code-review\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review","github_repo":"rijkvanzanten/rolling-wave-engineering","version":"1.0.0","license":"MIT","urls":{"web":"https://www.openagentskill.com/skills/rijkvanzanten-code-review","repository":"https://github.com/rijkvanzanten/rolling-wave-engineering/tree/main/skills/code-review","api":"/api/agent/skills/rijkvanzanten-code-review","install_api":"/api/skills/rijkvanzanten-code-review/install"},"meta":{"created_at":"2026-08-20T14:36:08.338106+00:00","updated_at":"2026-08-20T14:36:08.338106+00:00","agent_friendly":true}}