@alibaba

Creator · alibaba

Last updated · Aug 24, 2026

open-code-review-delegate

REVIEW · 67Registry indexed

Delegation mode for open-code-review (OCR). Instead of OCR calling an LLM endpoint, this skill instructs the host agent to perform the code review itself, using OCR only for deterministic engineering: file selection and rule resolution. Use when the host agent should drive the re

OpenAgentSkill Trust Score
67/100

Sandbox only

Quality91/100
Audit85/100
Stars21.3K
Verified installs0

Install targets

Codex install prompt

Install the "open-code-review-delegate" agent skill from https://github.com/alibaba/open-code-review/tree/main/skills/open-code-review-delegate. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Delegation mode for open-code-review (OCR). Instead of OCR calling an LLM endpoint, this skill instructs the host agent to perform the code review itself, using OCR only for deterministic engineering: file selection and rule resolution. Use when the host agent should drive the review with its own LLM capabilities. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {"event_id":"install_<unique-id>","skill_slug":"alibaba-open-code-review-delegate","task":"Install open-code-review-delegate","agent":"codex","outcome":"success","install_used":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.

Supply asset profile

Coding and developer agents

Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills.

Browse track

Scenario

GitHub automation

I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

Agent fit

Claude Code + CLI + Codex

Codex, Claude Code, Cursor, CLI, or custom agents.

Install

Ready

npx skills add alibaba/open-code-review --skill open-code-review-delegate

Maintenance

fresh

Pushed today

Risk

Needs review

Dependency or permission surface needs review

GitHub quality

21K

91/100 Quality · 75/100 Trust

Coverage tags

CodingGitHub automationcoding-agentsagent-skill

Review notes

Dependency or permission surface needs review · Permission surface may require sandboxing

Agent adoption scorecard

Trust, audit, and install readiness at a glance

These scores combine public repository metadata, OpenAgentSkill review signals, maintenance freshness, and install readiness. They are a shortlist signal, not a replacement for human review.

Quality

Excellent
91

High-confidence pick with strong adoption and healthy maintenance signals.

Trust

Sandbox only
67

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

Audit

Needs review
85

A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.

OpenAgentSkill Trust Score v5

Human review before install

Run only in a sandbox and compare close alternatives before using it for real work.

CodexClaude CodeCursorOpenAgentSkill CLI

Stars

21K GitHub stars

Repo activity

21K stars, 1.6K forks

Maintenance

Pushed today

License

Apache-2.0

Install

npx skills add alibaba/open-code-review --skill open-code-review-delegate

Install safety

standard package or runtime install path

Permission surface

shell or command execution, filesystem or document access

Agent outcomes

No agent outcome data yet

Docs

Strong README/SKILL.md context

Risk summary

Review before production

  • The SKILL.md excerpt is truncated at the end, but the provided content is clear and complete for the described workflow.
  • Quality score needs review
  • Permission surface needs review: shell or command execution, filesystem or document access
  • Dependency/runtime risk: command execution surface, external package install surface

Install readiness

Install path available

  • Install path is available
  • Repository evidence is available
  • License is declared
  • No Agent Proven outcome evidence yet

Agent-readable metadata

Machine-readable decision data for this skill.

Use this block or the embedded JSON to decide whether an agent should install this skill, choose an alternative, or ask for human review first.

View technical data+

Suited tasks

  • GitHub automation workflows
  • Claude Code teams
  • teams that value GitHub adoption signals
  • Inspect repository metadata

Suited agents

CodexClaude CodeCursorOpenAgentSkill CLICLI

Install decision

Command
npx skills add alibaba/open-code-review --skill open-code-review-delegate
Policy
review
Human review
yes

Trust and risk

Trust
67/100
Audit
85/100
Risk level
Needs review

Outcome loop

Endpoint
/api/agent/outcome
Event ID
resolve
Outcomes
5

Install command

npx skills add alibaba/open-code-review --skill open-code-review-delegate

Do not use when

  • teams that need a vendor-supported SLA
  • production agents without a repository review
  • The SKILL.md excerpt is truncated at the end, but the provided content is clear and complete for the described workflow.
  • No OpenAgentSkill engagement data yet
  • High-risk permission hints: Shell or command execution

Agent safety v2

57/100 · Review before install

Experimentalreview

Sparse or mixed signals. Useful for discovery, but not for autonomous installation.

Test manually in an isolated workspace and compare against safer alternatives.

Resolve via API

high

Shell or command execution

Skill metadata references terminal, CLI, shell, subprocess, or command execution workflows.

medium

Network access

Skill likely fetches remote pages, APIs, repositories, or external services.

medium

Filesystem access

Skill may read or write project files, documents, generated artifacts, or local workspace state.

  • High-risk permission hints: Shell or command execution
  • Dependency or permission surface needs review

Agent resolve plan

Let an agent verify fit before installing.

The Resolve API returns the selected skill, alternatives, safety policy, audit notes, install target, and copy-paste prompt an agent can follow without scraping this page.

Open text plan

Agent should check

  • Task fit and alternatives from Resolve API.
  • Audit score, trust score, and safety policy warnings.
  • Install target compatibility for Codex, Claude Code, Cursor, or CLI.

Copy prompt

Task: Use open-code-review-delegate in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20open-code-review-delegate%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/alibaba-open-code-review-delegate/install
Install command: npx skills add alibaba/open-code-review --skill open-code-review-delegate
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.

Agent handoff

Give an agent the install path, not another directory page.

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

Open install API

Agent prompt

Use open-code-review-delegate for this task. Review https://www.openagentskill.com/api/skills/alibaba-open-code-review-delegate/install, then install with: npx skills add alibaba/open-code-review --skill open-code-review-delegate

Registry metadata

Agent-readable profile for automatic skill selection.

This page exposes the same decision, trust, audit, use-case, and install signals through the Registry API, so agents can rank this skill without scraping the UI.

Open manifest

Agent fit

100/100

GitHub automation

Platforms

Claude Code

Audit report

Needs review · 85/100

A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.

View audit reportView eval report

Agent decision cockpit

Primary pick for GitHub automation

Use this as a leading candidate, then validate the README and install path in your own agent stack.

100
Readiness
Adopt
Stage

Role in stack

Primary pick

Primary fit

GitHub automation

Trust label

Production-ready

Install path

Command ready

Use when

  • GitHub automation workflows
  • Claude Code teams
  • teams that value GitHub adoption signals

Evidence

  • 21,306 GitHub stars
  • recent repository activity
  • install command or GitHub repo available
  • 91/100 quality profile

review first

  • The SKILL.md excerpt is truncated at the end, but the provided content is clear and complete for the described workflow.
  • No OpenAgentSkill engagement data yet

Implementation path

  1. 1Install it in a sandbox agent and run one GitHub automation task end to end.
  2. 2Compare output quality, latency, and failure behavior against at least one alternative.
  3. 3Promote it into production only after reviewing repository permissions, license, and maintenance signals.

Trust profile

Sandbox only

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

67
OpenAgentSkill Trust Score

GitHub adoption

PASS

21K GitHub stars

Stars/forks activity

PASS

21K stars, 1.6K forks; issue activity unavailable in current metadata

Recent maintenance

PASS

Pushed today

License clarity

PASS

Apache-2.0

Good signals

  • AI review approved
  • Install path is available
  • Repository evidence is available
  • Recently maintained repository
  • Large GitHub adoption signal
  • Install command has no obvious high-risk pattern
  • Outcome loop is ready but needs first real agent run

Review before install

  • The SKILL.md excerpt is truncated at the end, but the provided content is clear and complete for the described workflow.
  • Quality score needs review
  • Permission surface needs review: shell or command execution, filesystem or document access
  • Dependency/runtime risk: command execution surface, external package install surface
  • Permission surface: shell or command execution, filesystem or document access
  • No real agent outcome reports yet
  • Human review required before unattended installation

Recommended action

Run only in a sandbox and compare close alternatives before using it for real work.

Quality profile

Excellent candidate for agent workflows

High-confidence pick with strong adoption and healthy maintenance signals.

91
GitHub stars
21K
Freshness
Today
Install ready
Yes
License
Apache-2.0
Review before install: The SKILL.md excerpt is truncated at the end, but the provided content is clear and complete for the described workflow.

Workflow fit

Use this skill in these scenarios

Workflow fit

Add it to a complete workflow

Alternative shortlist

Compare before you install

Similar skills that may fit this task.

Compare all

Overview

--- name: open-code-review-delegate description: > Delegation mode for open-code-review (OCR). Instead of OCR calling an LLM endpoint, this skill instructs the host agent to perform the code review itself, using OCR only for deterministic engineering: file selection and rule resolution. Use when the host agent should drive the review with its own LLM capabilities. license: Apache-2.0 compatibility: > Requires the `ocr` CLI installed (via `npm install -g @alibaba-group/open-code-review` or GitHub release binary). Does NOT require a configured LLM endpoint — delegation mode is LLM-free on the OCR side. metadata: author: alibaba homepage: https://github.com/alibaba/open-code-review version: "1.0.0" ---

# Open Code Review — Delegation Mode

A skill for performing AI code review where OCR provides deterministic engineering (file filtering, rule resolution) and the host agent performs the actual review using its own intelligence and tools.

## Prerequisites

```bash which ocr || echo "NOT INSTALLED" ```

If `ocr` is not installed:

```bash npm install -g @alibaba-group/open-code-review ```

No LLM configuration is needed for delegation mode.

## Workflow

### Step 1: Preview — Determine What to Review

```bash ocr delegate preview --format json [--from <ref> --to <ref>] [--commit <hash>] [--exclude <patterns>] ```

This outputs: - **mode** (workspace / range / commit) - **from / to / commit / merge_base** — ref metadata for constructing git commands - **Reviewable file list** — paths, status, insertions/deletions - **Excluded files** — with exclusion reason

**Common invocations:**

| Scenario | Command | |----------|---------| | Workspace changes | `ocr delegate preview` | | Branch comparison | `ocr delegate preview --from main --to feature` | | Single commit | `ocr delegate preview -c abc123` |

### Step 2: Get Rules for Files

```bash ocr delegate rule --format json <path1> <path2> ... ```

Pass the reviewable file paths from Step 1. Output is grouped by rule content — files sharing the same rule appear under one group, avoiding repetition.

### Step 3: Get Diffs

Use git directly based on the mode/ref info from Step 1:

**Range mode** (merge_base provided in preview output): ```bash git diff <merge_base>..<to> -- <path> ```

**Commit mode**: ```bash git show <commit> -- <path> ```

**Workspace mode**: ```bash # Tracked files git diff HEAD -- <path> # New untracked files — read directly (entire file is new code) cat <path> ```

### Step 4: Review Each File

Create a checklist containing every `reviewable_files` entry. For each reviewable file:

Use `(path, status)` as the checklist identity. Workspace mode can report the same path twice when a staged deletion is followed by an untracked recreation.

1. Get its diff (Step 3) 2. Consult its Rule Group (from Step 2) for the review checklist 3. Conduct a thorough review, using appropriate context tools as needed 4. Mark the file `reviewed`, or `skipped` with a concrete reason

For large changes, review in bounded batches grouped by shared rules and diff size. Do not stop after finding the first high-severity issue.

### Step 5: Format Output

Each comment must follow this structure:

| Field | Type | Required | Description | |-------|------|----------|-------------| | path | string | yes | Relative file path | | content | string | yes | Review comment describing the issue | | start_line | integer | no | Start line in the new file | | end_line | integer | no | End line in the new file | | category | enum | no | bug, security, performance, maintainability, test, style, documentation, other | | severity | enum | no | critical, high, medium, low |

### Step 6: Classify and Report

Before reporting, verify that every previewed file is accounted for. Include `total_files`, `reviewed_files`, `skipped_files`, and `coverage_rate` in the summary. A skipped file must include its reason.

Group findings by severity:

- **Critical/High**: Bugs, security issues, data loss risks — always report - **Medium**: Performance concerns, error handling gaps, maintainability issues — report with context - **Low**: Style nits, minor suggestions — report only if clearly valuable

Discard likely false positives silently.

### Step 7: Fix (Optional)

If the user requested "review and fix": - Apply High/Critical fixes directly - Describe Medium fixes that require manual intervention - Skip Low-priority items unless trivial

## Sub-commands Reference

| Command | Purpose | |---------|---------| | `ocr delegate preview` | Which files to review + mode/ref metadata | | `ocr delegate rule <path...>` | Review rules grouped by content |

## Shared Flags

| Flag | Description | |------|-------------| | `--from <ref>` | Source ref for range mode | | `--to <ref>` | Target ref for range mode | | `-c, --commit <hash>` | Single commit mode | | `--repo <path>` | Repository root (default: cwd) | | `--rule <path>` | Custom rule.json path | | `--exclude <patterns>` | Comma-separated exclude patterns | | `-b, --background <text>` | Business context | | `-B, --background-file <path>` | Business context from Markdown file (takes precedence over `-b`) | | `-f, --format <text\|json>` | Output format; use `json` for agent integrations |

## Gotchas

- **No LLM needed on OCR side** — delegation mode never calls an LLM. All intelligence comes from the host agent. - **Rules are grouped** — Files sharing the same rule are grouped together in the output. You can pass any number of paths per call; for large changes, fetch rules per-batch as you review. - **Working directory matters** — `ocr delegate` operates on the Git repo at the current directory. Use `--repo /path` to override. - **Untracked files in workspace mode** — `preview` includes untracked files. For these, read the file directly instead of using `git diff`. - **Background context** — pass `--background` to `preview` when you have requirement context; it appears in the output for your reference during review. - **Coverage is mandatory** — every `reviewable_files` entry must end as reviewed or explicitly skipped; do not silently omit files.

Technical details

Version
1.0.0
License
Apache-2.0
Last updated
Aug 24, 2026
Published
Aug 24, 2026

Decision snapshot

Primary pick

100
Ready
Adopt
Stage

21,306 GitHub stars

Audit

Install review

Install and adoption review

85
Needs review
Security
75/100
Maintenance
100/100
Install
92/100
Open full auditView eval report

Agent-proven evidence

Agent-proven evidence

Outcome reports after resolve, review, install, and one narrow run.

0
Proven
Needs first agent runAuto-install: review firstLast: Unknown
Success rate
Recent failure
Outcomes
0
Output quality
Failed
0
Not relevant
0
Installs
0
Risk blocked
0
Setup needed
0
Production
0

No agent outcome data yet. The first agent run can report success, setup needs, risk blocks, failure, or not-relevant through /api/agent/outcome.

Install

Add to agent workflow

Free and open source. Review the report before installing into production agents.

Growth loop

Share kit

X

Scenario-led draft for open-code-review-delegate, ready for a manual X post.

Curator note
open-code-review-delegate: Delegation mode for open-code-review (OCR). Instead of OCR calling an LLM endpoint, this skil...

21.3K stars

https://www.openagentskill.com/skills/alibaba-open-code-review-delegate?ref=x
Open X draft
Optional reply with install command
Listing + install path for open-code-review-delegate:
https://www.openagentskill.com/skills/alibaba-open-code-review-delegate?ref=x

Install: npx skills add alibaba/open-code-review --skill open-code-review-delegate

Listing source

Registry indexed

Claimable

This listing was indexed from public sources and is not marked official until a maintainer claim is approved.

Creator
alibaba
Indexed by
OpenAgentSkill community index

Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals.

Claim this skill

Owner claim

Claim this skill listing

This Registry indexed listing is attributed to alibaba but is not marked official yet. Claim it to add a verified owner signal and make future launch, install, and audit updates easier to trust.

Creator backlink kit

Add the evidence badges to your README

Show the canonical listing, current trust and audit signals, and real Agent-Proven evidence where developers evaluate the repository.

[![Listed on OpenAgentSkill](https://www.openagentskill.com/api/badge/alibaba-open-code-review-delegate?metric=listed&label=Listed)](https://www.openagentskill.com/skills/alibaba-open-code-review-delegate)
[![OpenAgentSkill Trust](https://www.openagentskill.com/api/badge/alibaba-open-code-review-delegate?metric=trust&label=Trust)](https://www.openagentskill.com/skills/alibaba-open-code-review-delegate)
[![OpenAgentSkill Audit](https://www.openagentskill.com/api/badge/alibaba-open-code-review-delegate?metric=audit&label=Audit)](https://www.openagentskill.com/skills/alibaba-open-code-review-delegate/audit)
[![Agent Proven](https://www.openagentskill.com/api/badge/alibaba-open-code-review-delegate?metric=proven&label=Agent%20Proven)](https://www.openagentskill.com/skills/alibaba-open-code-review-delegate)

Author

A

alibaba

@alibaba

Platform fit

Health signals

GitHub stars
21.3K
Quality score
54/100
Last GitHub push
Aug 24, 2026
Framework hints
Unknown
OpenAgentSkill views
0
Install copies
0
Outbound clicks
0

Community signal

Share whether this skill looks useful for your agent workflow. Aggregated feedback improves rankings over time.

Trust & safety

Sandbox only

67
  • GitHub adoption21K GitHub starsPASS
  • Stars/forks activity21K stars, 1.6K forks; issue activity unavailable in current metadataPASS
  • Recent maintenancePushed todayPASS
  • License clarityApache-2.0PASS
  • README/SKILL.md completenessMetadata includes enough usage and workflow contextPASS
  • Dependency/runtime riskcommand execution surface, external package install surfaceCHECK