Review automation · hooks · 18 picks

Team review automation for agent workflows

Claude resources for teams adding repeatable checks, code review flows, repository hygiene, and operational guardrails.

Curated by @heyclaude-editors Updated 2026-07-18

Claude resources for teams adding repeatable checks, code review flows, repository hygiene, and operational guardrails.

Compared at a glance

The top 5 picks side by side on trust, install, platform support, and disclosed notes — full rationale for each below.

2 trust signals differ across this comparison (Package trust, Source provenance).

Next steps differ across picks — use the actions in the table below to copy install commands and source links per resource.

Field	Playwright E2E Testing Automation Skill Write and maintain reliable end-to-end tests with Playwright — Microsoft's browser automation library that auto-waits for actionable elements and runs the same suite against Chromium, Firefox, and WebKit. Open dossier	Git Pre Commit Validator - Hooks Comprehensive pre-commit hook that validates code quality, runs tests, and enforces standards. Open dossier	GitHub Actions AI-Powered CI/CD Automation Skill Build intelligent CI/CD pipelines with GitHub Actions, AI-assisted workflow generation, automated testing, and deployment orchestration. Open dossier	Agent Evals Regression Gate Skill Build repeatable eval suites that catch quality regressions in AI agent behavior before merge or release. Open dossier	Code Review Automation Capability Pack Skill Expert code-review capability pack for deterministic PR audits, risk-ranked findings, and low-noise fix planning without SaaS lock-in. Open dossier
Next stepsDiffers	Open dossier API JSON Open LLM Open source Newsletter Claim listing	Open dossier API JSON Open LLM Open source Newsletter Claim listing	Open dossier API JSON Open LLM Open source Newsletter Claim listing	Open dossier API JSON Open LLM Open source Newsletter Claim listing	Open dossier API JSON Open LLM Open source Newsletter Claim listing
Trust
Review status	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed
Package trustDiffers	Package verified2025-10-16	Package not verified	Package verified2025-10-16	Package verified2026-04-10	Package verified2026-04-11
Source provenanceDiffers	No submission link	Source-backed	No submission link	No submission link	No submission link
Submitter	—	—	—	—	—
Install risk	Low risk	Review first	Low risk	Low risk	Low risk
Notes	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓
Brand	—	—	GitHub	—	—
Category	skills	hooks	skills	skills	skills
Source	First-party	Source-backed	First-party	First-party	First-party
Author	JSONbored	JSONbored	JSONbored	JSONbored	JSONbored
Added	2025-10-16	2025-09-16	2025-10-16	2026-04-10	2026-04-11
Platforms	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code Codex Windsurf Gemini Cursor CLI
Harness	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code Codex Windsurf Gemini Cursor CLI
Source repo	—	—	—	—	—
Safety notes	✓`npx playwright install --with-deps` downloads browser binaries (~500 MB for Chromium, Firefox, and WebKit) from Playwright's CDN and on Linux installs system-level packages. Review your network and environment policies before running in restricted infrastructure. Generated tests have full browser-level access to any URL they target. Review test scripts before running them against authenticated sessions or production environments — Playwright can submit forms, click buttons, and make network requests as a real user.	✓Runs automatically on its configured Claude Code hook event and executes shell logic that can read, modify, or delete files in your project (and may run builds, installs, or network calls); review the script and scope it to expected paths before enabling.	✓Setup downloads and unzips a package, and generated workflows run build/test/deploy commands in CI with repository permissions; review workflow YAML and least-privilege the GITHUB_TOKEN before merging.	✓This skill produces automated release recommendations (merge, patch, or rollback) from eval scores; treat them as decision support and require human review before gating production releases or running suggested commands.	✓Installs from a downloaded package and may run local commands or scaffold files as part of the workflow; review the package and any generated changes before applying.
Privacy notes	✓Playwright runs entirely on your local machine. Traces, screenshots, and HTML test reports are written to local disk only and are not uploaded to Microsoft or any external service. Trace files and failure screenshots may capture sensitive content from the application under test (form data, rendered PII, session tokens visible in URLs). Store and rotate these files appropriately.	✓Receives Claude Code hook input (session metadata, file paths, and tool output) and reads local project files; review what the script logs or forwards to external services and keep credentials out of its output.	✓CI workflows read repository code and use secrets (API keys, deploy credentials, model keys); store them in GitHub Actions secrets, never in workflow files or logs, and review what third-party actions can access.	✓Inputs can include source files, prompts, logs, account metadata, repository details, and operational context that may be sent to the configured AI model. Redact secrets, customer data, private URLs, credentials, and proprietary implementation details before sharing prompts, reports, or generated artifacts.	✓Operates on your local project files and any context you share in the session; review what you expose before sharing — nothing is sent beyond the model unless a step calls an external service.
Prerequisites	Node.js 18+ Playwright 1.40+ with the @playwright/test package Browser binaries installed via `npx playwright install` (Chromium, Firefox, WebKit) A web application accessible for testing (local dev server, staging, or production URL)	— none listed	GitHub repository with Actions enabled Test suite (Vitest, Jest, Playwright) Deployment target (Vercel, AWS, GCP, etc.) GitHub account with repository access and Actions enabled (free tier includes 2,000 minutes/month)	Existing prompts, tools, or agent workflows to evaluate A representative set of real user tasks or transcripts CI or local runner where eval suites can be executed repeatedly	Repository access and PR diff Security severity policy Test/lint/typecheck commands
Install	`npx playwright install --with-deps`	`mkdir -p .claude/hooks && touch .claude/hooks/git-pre-commit-validator.sh && chmod +x .claude/hooks/git-pre-commit-validator.sh`	`curl -L https://heyclau.de/downloads/skills/github-actions-ai-cicd.zip -o github-actions-ai-cicd.zip && unzip -o github-actions-ai-cicd.zip -d ./github-actions-ai-cicd`	`curl -L https://heyclau.de/downloads/skills/agent-evals-regression-gate.zip -o agent-evals-regression-gate.zip && unzip -o agent-evals-regression-gate.zip -d ./agent-evals-regression-gate`	`curl -L https://heyclau.de/downloads/skills/coderabbit-lite-pr-review-capability-pack.zip -o coderabbit-lite-pr-review-capability-pack.zip && unzip -o coderabbit-lite-pr-review-capability-pack.zip -d ./coderabbit-lite-pr-review-capability-pack`
Config	—	`{ "hooks": { "preToolUse": { "script": "./.claude/hooks/git-pre-commit-validator.sh", "matchers": [ "git" ] } } }`	—	—	—
Citations	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationplaywright.dev Package (SHA-256 pinned)/downloads/skills/playwright-e2e-testing.zip Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationpre-commit.com Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationdocs.github.com Package (SHA-256 pinned)/downloads/skills/github-actions-ai-cicd.zip Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationopenai.com Package (SHA-256 pinned)/downloads/skills/agent-evals-regression-gate.zip Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationdocs.github.com Package (SHA-256 pinned)/downloads/skills/coderabbit-lite-pr-review-capability-pack.zip Source methodology →
Claim	Unclaimed	Unclaimed	Unclaimed	Unclaimed	Unclaimed