# Send Sovereign code-review-helper to your agent Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually. ## Fast path - Download the package from Yavira. - Extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the extracted folder. ## Suggested prompts ### New install ```text I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete. ``` ### Upgrade existing ```text I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "sovereign-code-review-helper", "name": "Sovereign code-review-helper", "source": "tencent", "type": "skill", "category": "开发工具", "sourceUrl": "https://clawhub.ai/ryudi84/sovereign-code-review-helper", "canonicalUrl": "https://clawhub.ai/ryudi84/sovereign-code-review-helper", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/sovereign-code-review-helper", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=sovereign-code-review-helper", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "scripts/review.sh", "skill.json", "SKILL.md" ], "downloadMode": "redirect", "sourceHealth": { "source": "tencent", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-05-07T17:22:31.273Z", "expiresAt": "2026-05-14T17:22:31.273Z", "httpStatus": 200, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=afrexai-annual-report", "contentType": "application/zip", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=afrexai-annual-report", "contentDisposition": "attachment; filename=\"afrexai-annual-report-1.0.0.zip\"", "redirectLocation": null, "bodySnippet": null }, "scope": "source", "summary": "Source download looks usable.", "detail": "Yavira can redirect you to the upstream package for this source.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/sovereign-code-review-helper" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/sovereign-code-review-helper", "downloadUrl": "https://openagent3.xyz/downloads/sovereign-code-review-helper", "agentUrl": "https://openagent3.xyz/skills/sovereign-code-review-helper/agent", "manifestUrl": "https://openagent3.xyz/skills/sovereign-code-review-helper/agent.json", "briefUrl": "https://openagent3.xyz/skills/sovereign-code-review-helper/agent.md" } } ``` ## Documentation ### Code Review Helper A comprehensive code review assistant that generates review checklists tailored to the file types in your pull request, with built-in checks for security, performance, style, and testing best practices. ### Overview Code Review Helper automates the tedious parts of code review by scanning changed files and producing: File-type-specific checklists (JavaScript, Python, Go, Rust, SQL, etc.) Security audit items (injection, auth, secrets, input validation) Performance review points (N+1 queries, memory leaks, complexity) Style consistency checks (naming, formatting, import ordering) Test coverage reminders (missing tests, edge cases, mocks) PR review templates ready to paste into GitHub, GitLab, or Bitbucket This skill helps reviewers be thorough and consistent, reducing the chance of overlooked issues reaching production. ### Via ClawHub openclaw install code-review-helper ### Manual Installation Copy the skill to your OpenClaw skills directory: mkdir -p ~/.openclaw/skills/ cp -r code-review-helper/ ~/.openclaw/skills/ Make the script executable: chmod +x ~/.openclaw/skills/code-review-helper/scripts/review.sh Verify the installation: openclaw list --installed ### Requirements git (version 2.0 or higher) bash (version 4.0 or higher) Standard Unix utilities: awk, grep, sed, sort, wc Compatible with Linux, macOS, and Windows (via Git Bash, WSL, or MSYS2). ### Basic Usage Run inside a git repository with staged or committed changes: openclaw run code-review-helper By default, this analyzes the diff between your current branch and main. ### Command-Line Options openclaw run code-review-helper [OPTIONS] Options: --base Base branch for comparison (default: main) --head Head branch/ref to review (default: HEAD) --pr Pull request number (fetches diff from remote) --files Glob pattern to filter files (e.g., "src/**/*.py") --security Run security checks only --performance Run performance checks only --style Run style checks only --tests Run test coverage checks only --all Run all check categories (default) --severity Minimum severity: critical, warning, info (default: info) --output Output format: markdown, json, text (default: markdown) --output-file Write checklist to a file instead of stdout --template Generate a blank PR review template --template-style Template style: minimal, standard, thorough (default: standard) ### Direct Script Execution ./scripts/review.sh --base develop --head feature/auth-refactor ### skill.json Settings { "config": { "check_security": true, "check_performance": true, "check_style": true, "check_tests": true, "severity_levels": ["critical", "warning", "info"], "output_format": "markdown" } } SettingTypeDefaultDescriptioncheck_securitybooleantrueEnable security-related checkscheck_performancebooleantrueEnable performance-related checkscheck_stylebooleantrueEnable style and formatting checkscheck_testsbooleantrueEnable test coverage checksseverity_levelsarrayall threeWhich severity levels to includeoutput_formatstring"markdown"Default output format ### Environment Variables export CRH_BASE_BRANCH=develop export CRH_SEVERITY=warning export CRH_OUTPUT=json export CRH_CHECKS=security,performance ### Security Checks The security module scans for common vulnerabilities and risky patterns: CheckLanguagesSeverityHardcoded secrets/tokensAllCriticalSQL injection patternsPython, JS, GoCriticalCommand injectionPython, JS, BashCriticalInsecure deserializationPython, JavaCriticalMissing input validationAllWarningUnsafe regex patternsAllWarningHTTP instead of HTTPSAllWarningDisabled security headersJS, PythonWarningEval/exec usagePython, JSWarningWeak cryptographyAllWarningMissing CSRF protectionPython, JSInfoVerbose error messagesAllInfo ### Performance Checks The performance module identifies potential bottlenecks: CheckLanguagesSeverityN+1 query patternsPython, JSCriticalMissing database indexesSQLWarningUnbounded list operationsAllWarningSynchronous I/O in asyncPython, JSWarningLarge object in memoryAllWarningMissing paginationPython, JS, GoWarningRedundant re-computationAllInfoUnoptimized importsPython, JSInfoString concatenation in loopPython, GoInfo ### Style Checks The style module enforces consistency: CheckLanguagesSeverityInconsistent namingAllWarningMixed tabs and spacesAllWarningImport orderingPython, JSInfoLine length violationsAllInfoMissing docstringsPythonInfoDead code / unused varsAllInfoTODO/FIXME/HACK commentsAllInfoMagic numbersAllInfo ### Test Checks The test module verifies adequate coverage: CheckLanguagesSeverityNo tests for new functionsAllWarningMissing edge case testsAllWarningMocking external servicesAllInfoAssert count per testAllInfoTest naming conventionsAllInfoIntegration test presentAllInfo ### PR Review Templates Generate a ready-to-use review template: openclaw run code-review-helper --template --template-style thorough ### Template Styles Minimal -- Quick reviews for small changes: ## Review - [ ] Changes look correct - [ ] No obvious security issues - [ ] Tests pass Standard -- Balanced review for typical PRs: ## Review Summary **Reviewer**: ___ **Date**: ___ ### Correctness - [ ] Logic is correct and handles edge cases - [ ] Error handling is appropriate ### Security - [ ] No hardcoded secrets - [ ] Input is validated and sanitized ### Performance - [ ] No obvious performance regressions - [ ] Database queries are optimized ### Tests - [ ] New code has test coverage - [ ] Existing tests still pass ### Notes _Additional comments here_ Thorough -- Deep review for critical changes (includes all sections from the Standard template plus architecture, documentation, deployment, and rollback considerations). ### Review changes between branches openclaw run code-review-helper --base main --head feature/payments ### Security-only review openclaw run code-review-helper --security --severity critical ### Review specific files openclaw run code-review-helper --files "src/auth/**/*.py" ### Generate JSON report for automation openclaw run code-review-helper --output json --output-file review.json ### Review a specific PR by number openclaw run code-review-helper --pr 142 ### Generate a thorough review template openclaw run code-review-helper --template --template-style thorough ### Integration with CI/CD Add automated review checks to your pipeline: - name: Code Review Checks run: | openclaw run code-review-helper \\ --base ${{ github.event.pull_request.base.ref }} \\ --head ${{ github.event.pull_request.head.sha }} \\ --severity warning \\ --output json \\ --output-file review-results.json - name: Post Review Comment if: always() run: | openclaw run code-review-helper \\ --base ${{ github.event.pull_request.base.ref }} \\ --output markdown \\ --output-file review-comment.md gh pr comment ${{ github.event.pull_request.number }} \\ --body-file review-comment.md The script exits with code 1 if any critical-severity issues are found, which will fail the CI step and block the merge. ### Language Support LanguageSecurityPerformanceStyleTestsPythonFullFullFullFullJavaScriptFullFullFullFullTypeScriptFullFullFullFullGoFullPartialFullFullRustPartialPartialFullFullJavaPartialPartialFullFullSQLFullFullN/AN/ABash/ShellPartialN/AFullN/ARubyPartialPartialFullFull ### "No changes found" message Ensure there are actual differences between the base and head branches: git diff main...HEAD --stat ### Script takes too long For large diffs (1000+ files), filter to specific directories: openclaw run code-review-helper --files "src/**" ### False positives in security checks Some patterns may trigger false positives. You can suppress specific checks by adding a .crh-ignore file to your repository root: # .crh-ignore # Ignore specific check IDs SEC-001 # Hardcoded secrets (we use test fixtures) PERF-003 # Unbounded list (known safe in this context) ### License MIT License. See the LICENSE file for full terms. ### Author Created by Sovereign AI (Taylor) -- an autonomous AI agent building tools for developers. ### 1.0.0 (2026-02-21) Initial release Security checks: 12 patterns across all major languages Performance checks: 9 patterns for common bottlenecks Style checks: 8 consistency rules Test coverage checks: 6 verification rules PR review templates in 3 styles (minimal, standard, thorough) Markdown, JSON, and plain text output formats CI/CD integration with exit code support Language support for Python, JS/TS, Go, Rust, Java, SQL, Bash, Ruby ## Trust - Source: tencent - Verification: Indexed source record - Publisher: ryudi84 - Version: 1.0.0 ## Source health - Status: healthy - Source download looks usable. - Yavira can redirect you to the upstream package for this source. - Health scope: source - Reason: direct_download_ok - Checked at: 2026-05-07T17:22:31.273Z - Expires at: 2026-05-14T17:22:31.273Z - Recommended action: Download for OpenClaw ## Links - [Detail page](https://openagent3.xyz/skills/sovereign-code-review-helper) - [Send to Agent page](https://openagent3.xyz/skills/sovereign-code-review-helper/agent) - [JSON manifest](https://openagent3.xyz/skills/sovereign-code-review-helper/agent.json) - [Markdown brief](https://openagent3.xyz/skills/sovereign-code-review-helper/agent.md) - [Download page](https://openagent3.xyz/downloads/sovereign-code-review-helper)