Agent Skills' code review skill now drops findings your code already rules out
1 week ago
Agent Skills' code-review-and-quality skill now checks each finding against the callers, guards and tests that reach the changed code before reporting it, labels bugs already in the base apart from new regressions, and accepts zero findings as a valid result. Merged November 1 in pull request #736; on main, after release 0.6.15. https://github.com/addyosmani/agent-skills/pull/736 https://github.com/addyosmani/agent-skills/blob/main/skills/code-review-and-quality/SKILL.md
Ask about this presentation
Chapters
0:00Agent Skills' code review skill now drops findings your code already rules out
0:16Three sentences added to Step 4
0:29The owner guard disproves the bypass claim
0:43A new regression and an old defect, labelled apart
0:57A clean change gets zero findings
1:07On main, unmeasured on a model
1:24A review that can say zero
Show transcriptHide transcript
In Addy Osmani's Agent Skills, the code review and quality skill now checks each finding against the callers, guards and tests that reach the changed code, and drops it when they rule it out. So a review stops flagging bugs your code already prevents.
In Step 4, before any finding is reported, the reviewer now checks the callers, guards and tests. Bugs already in the base stay apart from new regressions. And zero findings is a valid answer.
One new test hands the reviewer a claim: the lookup function has no owner check, so anyone can withdraw. But its only caller refuses anyone who isn't the owner. So the claim is rejected.
In the same test, less than or equal becomes less than, so withdrawing your whole balance now fails. That bug is new. The fee was already wrong before the change, so it is labelled pre-existing.
A third test rewrites the check without changing what it allows. The expected review reports zero new defects and invents no blocker.
It merged November first, the day after release 0.6.15, so it is on main, not yet in a tagged release, and the review command gets it too. No graded model run was made, so the gain is unmeasured.
False alarms are what agent reviews cost you most. I would take this rule. A review that checks the caller and can report nothing is one you can believe when it does flag something.
Up next
2:54Anthropic’s Excel skill stops LibreOffice from rewriting your workbook
@skill-repos
4 hours ago
2:01Agent Skills’ frontend skill stops installing test runners just to check its work
@skill-repos
15 hours ago
2:23Trail of Bits’ taint-trace skill adds the source and sink models your taint analyzer is missing
@skill-repos
2 days ago
1:30Anthropic’s Word, PDF, PowerPoint and Excel skills are now Apache 2.0
@skill-repos
1 week ago
2:32Trail of Bits' cvss-scoring skill turns a bug description into a CVSS v4.0 vector
@skill-repos
1 week ago
3:02Superpowers 7.0.2 fixes skill loading on Pi, OpenCode and Copilot for Windows
@skill-repos
1 week ago
2:12Superpowers’ brainstorming skill now asks why first and stops asking filler questions
@skill-repos
1 week ago
2:10Superpowers 7.0.1 keeps its five-round fix limit after Claude Code compacts
@skill-repos
3 weeks ago
2:11Trail of Bits' regression-hunt skill only reports a bug a fresh agent can reproduce
@skill-repos
3 weeks ago
2:30Superpowers’ brainstorming skill now reads your project before it asks you anything
@skill-repos
3 weeks ago
2:07Trail of Bits' gh-cli plugin stops long Claude Code sessions from breaking every Bash call
@skill-repos
1 month ago
2:13Trail of Bits fixes mermaid-to-proverif, which read ProVerif's results backwards
@skill-repos
1 month ago