rad-code-reviewlisted

Review my code, code review, is this ready to ship, check for bugs, security audit, review this PR, pre-merge check, is this safe to deploy, check code quality. The specialist lanes and memory that the built-in /code-review doesn't have: it invokes the built-in engine for general bug-finding, then adds a mechanical hallucinated-imports validator (with a vendored slopsquat denylist; Python/JS/TS/Rust/Go), an AI-slop lane, framework IDOR heuristics, a Supabase/Firebase BaaS-RLS security lane, an optional codex-security specialist scan on deep/--security-deep, and a deterministic findings index that tracks CR-NNN IDs across runs (new / recurring / resolved). Fixes apply to the working tree only — never commits.
RadOrigin-LLC/RAD-Claude-Skills · ★ 5 · Code & Development · score 76

Install: claude install-skill RadOrigin-LLC/RAD-Claude-Skills

**What this is.** The built-in `/code-review` is the review engine — 8–10 parallel finders, verification with evidence-quoted verdicts, `--fix`, `--comment`. This skill does not compete with it. It rides it, and adds what it doesn't have: mechanical checks, findings memory across runs, a severity taxonomy, and the specialist lanes (AI slop, framework IDOR, BaaS/RLS). **Scope.** Diff, branch, or PR only. Default scope matches the engine's: the current branch's commits ahead of its upstream plus uncommitted changes (working diff only when there is no upstream). `--since <commit>` reviews a branch range; a bare `<pr#>` reviews a GitHub PR. There is no full-repo mode; for a whole-repo deep dive use `/code-review ultra` or run this skill per directory-scoped diff. **Naming.** Finding IDs are `CR-NNN`, assigned and persisted mechanically by `scripts/findings-index.py` — the same finding keeps the same ID across runs. Config (`.radcrconfig.yml`) and state (`.radcr/`) keep the `radcr` prefix; renaming them would break existing per-repo state for zero readability gain. ## Effort and cost contract | Mode | Engine level | Lane pass | Security scanner | Expected cost profile | |---|---|---|---|---| | quick | low | validator only, no lane subagent | never | seconds; near-zero beyond engine | | standard (default) | medium | 1 lane subagent, session model | only with explicit `--scan` | one engine run + one subagent | | deep | xhigh | 1 lane subagent + `--security-deep` rules if flagged