Does it support running actual test commands?

Yes, the skill has Bash access and can attempt to run test suites like npm test or pytest to verify implementation coverage.

What specifically does Review Sonnet check for in my code?

It evaluates code correctness, logic bugs, error handling, and security vulnerabilities like SQL injection, XSS, and hardcoded secrets.

How does the skill determine if a review passes or fails?

It follows strict decision rules: any 'error' severity issue or three or more 'warning' issues will result in a 'needs_changes' status.

Can this skill review architectural plans before I write code?

Yes, it detects plan-refined.json files to assess feasibility, completeness, and potential security concerns in your approach.

Where can I find the output of the review?

All findings, including a summary and specific issue locations, are written to a standardized JSON file at .task/review-sonnet.json.

Review Sonnet: Fast Code & Plan Review

Name: Review Sonnet: Fast Code & Plan Review
Author: cskwork

bycskwork

보안 및 테스팅

Performs rapid, high-quality reviews of implementation plans and source code to ensure security, correctness, and test coverage.

소개

Review Sonnet is a specialized Claude Code skill designed for high-velocity development cycles, providing automated feedback on both architectural plans and final implementations. It leverages the Sonnet model to quickly identify logic bugs, security vulnerabilities mapping to OWASP Top 10, and gaps in test coverage, outputting standardized JSON reports. This skill serves as an efficient first-pass reviewer that catches obvious issues before deep human analysis, ensuring that code meets pre-defined standards for quality, security, and practical maintainability.

주요 기능

Validation of test coverage including the ability to run test suites via Bash
Automated security auditing focused on OWASP Top 10 vulnerabilities
0 GitHub stars
Dual-mode analysis for both project plans and final code implementations
Standardized JSON reporting with clear severity-based decision rules
Rapid identification of logic bugs, hardcoded secrets, and error handling gaps

사용 사례

Validating a technical plan's feasibility before starting implementation
Conducting a rapid security and quality audit of new pull requests
Enforcing consistent coding standards and test requirements in local workflows

소개

주요 기능

Validation of test coverage including the ability to run test suites via Bash
Automated security auditing focused on OWASP Top 10 vulnerabilities
0 GitHub stars
Dual-mode analysis for both project plans and final code implementations
Standardized JSON reporting with clear severity-based decision rules
Rapid identification of logic bugs, hardcoded secrets, and error handling gaps

사용 사례

Validating a technical plan's feasibility before starting implementation
Conducting a rapid security and quality audit of new pull requests
Enforcing consistent coding standards and test requirements in local workflows