Agent Skills' code review skill now drops findings your code already rules out
2 hours ago
Agent Skills' code-review-and-quality skill now checks each finding against the callers, guards and tests that reach the changed code before reporting it, labels bugs already in the base apart from new regressions, and accepts zero findings as a valid result. Merged November 1 in pull request #736; on main, after release 0.6.15. https://github.com/addyosmani/agent-skills/pull/736 https://github.com/addyosmani/agent-skills/blob/main/skills/code-review-and-quality/SKILL.md
Ask about this presentation
Chapters
0:00Agent Skills' code review skill now drops findings your code already rules out
0:16Three sentences added to Step 4
0:29The owner guard disproves the bypass claim
0:43A new regression and an old defect, labelled apart
0:57A clean change gets zero findings
1:07On main, unmeasured on a model
1:24A review that can say zero
Show transcriptHide transcript
In Addy Osmani's Agent Skills, the code review and quality skill now checks each finding against the callers, guards and tests that reach the changed code, and drops it when they rule it out. So a review stops flagging bugs your code already prevents.
In Step 4, before any finding is reported, the reviewer now checks the callers, guards and tests. Bugs already in the base stay apart from new regressions. And zero findings is a valid answer.
One new test hands the reviewer a claim: the lookup function has no owner check, so anyone can withdraw. But its only caller refuses anyone who isn't the owner. So the claim is rejected.
In the same test, less than or equal becomes less than, so withdrawing your whole balance now fails. That bug is new. The fee was already wrong before the change, so it is labelled pre-existing.
A third test rewrites the check without changing what it allows. The expected review reports zero new defects and invents no blocker.
It merged November first, the day after release 0.6.15, so it is on main, not yet in a tagged release, and the review command gets it too. No graded model run was made, so the gain is unmeasured.
False alarms are what agent reviews cost you most. I would take this rule. A review that checks the caller and can report nothing is one you can believe when it does flag something.
Up next
2:10Superpowers 7.0.1 keeps its five-round fix limit after Claude Code compacts
@skill-repos · 1 week ago
2:11Trail of Bits' regression-hunt skill only reports a bug a fresh agent can reproduce
@skill-repos · 1 week ago
2:30Superpowers’ brainstorming skill now reads your project before it asks you anything
@skill-repos · 1 week ago
2:07Trail of Bits' gh-cli plugin stops long Claude Code sessions from breaking every Bash call
@skill-repos · 2 weeks ago
2:13Trail of Bits fixes mermaid-to-proverif, which read ProVerif's results backwards
@skill-repos · 2 weeks ago
3:18Trail of Bits’ dimensional-analysis skill now checks the math a code comment calls correct
@skill-repos · 2 weeks ago
2:03Agent Skills' simplify-ignore hook stops deleting the code you hid from Claude
@skill-repos · 2 weeks ago
1:54ECC's skill-health dashboard stops marking unchanged skills as worsening
@skill-repos · 3 weeks ago
2:49ECC's module-regression skill reruns everything downstream of the module you changed
@skill-repos · 3 weeks ago
1:59ECC's verification-loop skill stops reporting a failed build as a pass
@skill-repos · 3 weeks ago
1:50Agent Skills fixes its React error boundary, which crashed even with healthy children
@skill-repos · 3 weeks ago
1:22Superpowers 7.0 stops a cloned repo from running its own bash at session start on Windows
@skill-repos · 3 weeks ago