Craft Review — Security skill for Claude Code
PR review skill - invokes pr-reviewer-expert agent against branch diff, story commits, or full project audit.
How to install Craft Review
Installs to ~/.claude/skills/drobins25-craft-craft-review/SKILL.md
mkdir -p ~/.claude/skills/drobins25-craft-craft-review && curl -fsSL https://raw.githubusercontent.com/drobins25/craft/HEAD/commands/craft-review.md -o ~/.claude/skills/drobins25-craft-craft-review/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Craft Review does
name: review description: "PR review skill - invokes pr-reviewer-expert agent against branch diff, story commits, or full project audit."
Review
Run a PR-style code review using the crystallized pr-reviewer-expert agent. Three approaches based on what you want reviewed.
Modes
| Mode | Trigger | What gets reviewed |
|---|---|---|
| Branch (default) | /craft:review |
Everything on current branch not on origin/main |
| Story | `/craft:review story |
Alternatives in Security
- Tier 3 Code Refinement Report — Date: 2026-03-20 Status: ALL 54 FINDINGS IMPLEMENTED Scope: Full codebase (18 plugins, 888 files, ~266K lines) 222 ★
- Commit Hook Checklist — Audit commit-hook automation as gates against AI slop and broken commits (Node.js, Go, polyglot) 168 ★
- Beamer Skill — A Claude Code skill for creating, compiling, reviewing, and polishing academic Beamer LaTeX presentations 163 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Qc DevOps Review
Act as a full QC/DevOps review team on a repo, branch, PR, or diff - static analysis, type checks, test suites
Vf Review
Parallel Salesforce code review of the diff against a base ref - dispatch the quality gate and security review
Citadel
Post-implementation conformance audit against the PRD, branch diff, and known trap doors.
API Contract Review
API platform contract review. Invokes api-platform-reviewer to audit rate-limit design, OAuth scope hygiene, w
Python Review
Comprehensive Python code review for PEP 8 compliance, type hints, security, and Pythonic idioms. Invokes the
Cpp Review
Comprehensive C++ code review for memory safety, modern C++ idioms, concurrency, and security. Invokes the cpp
Related Agents
Sdlc Security
Runs a full OWASP Top 10 (2025) audit, plus OWASP LLM Top 10 (2025) when AI/LLM components are present, agains
Worktree Reviewer
Adversarial reviewer for a User Story in its git worktree. Launched by the Orchestrator Agent when a worktree-
PR Summarizer
Generates comprehensive PR summaries after all automated tests pass. Analyzes the full diff against the base b