Skip to main content

Browse the directory

Showing 8 resources for "code-review"
Saved
Active

Source-backed filter active — add entries to compare trust side by side.

Trust snapshot

8 results in this view

Claimed
0%(0/8)

2 trust signals differ in this sample: Source provenance, Submitter

Signals differ on Source provenance, Submitter — add entries to compare before you install.

Rollout signal scan

2 rollout risk signals in current results

Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.

8 scanned

Install payload

Install payload is broadly covered in current results.

good

75% (6/8)

Adoption queue

Browse adoption queue · balanced

2/8 visible results are in hold tier and need mitigation before adoption.

ready 0caution 6hold 2

Addy Osmani Agent Skills

1 blockers: Metadata review

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

skills/addy-osmani-agent-skills · trust review · confidence 67%

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

hooks/large-generated-diff-detector · trust review · confidence 67%

PAL MCP Server

1 blockers: Metadata review

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

mcp/pal-mcp-server · trust review · confidence 67%

Roam Code

1 blockers: Metadata review

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

mcp/roam-code · trust review · confidence 67%

Superpowers Skills

1 blockers: Metadata review

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

skills/superpowers-skills · trust review · confidence 67%

Gitleaks

2 blockers: Metadata review, Install payload

hold

36/100

Request metadata review from maintainers or internal owners.

Add install/config payload for reproducible team rollout.

Collect package checksum or signed artifact information.

tools/gitleaks · trust review · confidence 50%

Semgrep

2 blockers: Metadata review, Install payload

hold

36/100

Request metadata review from maintainers or internal owners.

Add install/config payload for reproducible team rollout.

Collect package checksum or signed artifact information.

tools/semgrep · trust review · confidence 50%

Decision confidence

Decision confidence scan · balanced

2/8 results are low-confidence and need review before adoption.

high 0medium 6low 2

Addy Osmani Agent Skills

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

skills/addy-osmani-agent-skills · trust review

PAL MCP Server

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

mcp/pal-mcp-server · trust review

Roam Code

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

mcp/roam-code · trust review

Superpowers Skills

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

skills/superpowers-skills · trust review

Gitleaks

Hold adoption until Metadata review, Package integrity are resolved.

low

36/100

Missing: Metadata reviewMissing: Package integrityMissing: Install payload

tools/gitleaks · trust review

Semgrep

Hold adoption until Metadata review, Package integrity are resolved.

low

36/100

Missing: Metadata reviewMissing: Package integrityMissing: Install payload

tools/semgrep · trust review

Freshness distribution

Current results are broadly fresh

Median age 53 days; all 8 scanned entries are within 90 days.

median 53d

Aging

91–180 days

0%

0 entries

Stale

> 180 days

0%

0 entries

Theme distribution

Results center on code-review

100% of this view shares the top theme. Leading themes: code-review, security, agent-skills.

Focused

30 distinct themes across 8 scanned

Cursor logo

Addy Osmani's production-grade Agent Skills pack for AI coding agents, with lifecycle slash commands, engineering workflow skills, review personas, quality gates, and cross-agent setup guidance for Claude Code, Cursor, Gemini CLI, Antigravity CLI, OpenCode, GitHub Copilot, and other agents.

Level:expertType:capability-packVerified:validated
Safety ✓ Privacy ✓
OpenCode logo

MIT-licensed skill and plugin framework by Jesse Vincent for Claude Code, Codex, Cursor, Gemini CLI, OpenCode, and other AI coding agents, covering brainstorming, planning, TDD, systematic debugging, subagent-driven development, code review, git worktrees, and finish-the-branch workflows.

Level:expertType:capability-packVerified:validated
Safety ✓ Privacy ✓

Slash command that reviews a pull request diff for security regressions: authentication and authorization gaps, injection surfaces, secret exposure, unsafe deserialization, and dependency risk introduced by the change.

Invocation:/pr-security-review [pr-number]
Safety ✓ Privacy ✓
Roam Code logo
Roam Codeby Cranot · submitted by oktofeesh1

Local codebase intelligence CLI and MCP server that gives Claude a SQLite code graph, change-safety gates, code health checks, impact analysis, review tools, and audit evidence for agent-assisted coding.

Provider Abstraction Layer MCP server for orchestrating multiple AI models, external AI CLIs, planning, consensus, code review, debugging, and delegated sub-agent workflows from one MCP client.

PostToolUse hook that flags two review hazards as Claude writes files: edits to generated or vendored artifacts (lockfiles, minified bundles, source maps, dist/build output, snapshots, protobuf output) and oversized diffs that change more lines than a configurable threshold versus the committed version.

Trigger:PostToolUse
Safety ✓ Privacy ✓
Gitleaks logo
Gitleaksby Gitleaks · submitted by oktofeesh1

Open-source secret scanner for finding passwords, API keys, tokens, and other credentials in git history, files, directories, and stdin.

Semgrep logo
Semgrepby Semgrep · submitted by oktofeesh1

Static analysis platform and open-source CLI for finding bugs, security issues, secrets, dependency risk, and custom rule matches in code.