- Home
- Skills
- Code Quality & Review
- craft review
More screenshots
Works with the AI Agents you already use
craft review
A strict read-only quality gate that enforces complexity limits, SOLID principles, and design patterns.
Free
craft review
Example session with this skill installed
Review my changes in user_service.ts and check against the acceptance criteria:
- Password must be hashed before saving, 2. No direct DB calls in the controller.
- Read your context and instructions
- Compiled the craft review
I have completed the read-only quality gate review for user_service.ts comparing the current diff against your acceptance criteria and the craft-gates standards.
Code Quality Audit
VERDICT: CHANGES_REQUIRED
BLOCKERS: 1 MAJORS: 1 MINORS: 2
GATES CHECKED (per function):
- user_service.ts:registerUser — lines: 42, nesting: 3, complexity: 8, callback-depth: 1 [VIOLATION]
- user_service.ts:validateInput — lines: 12, nesting: 1, complexity: 3, callback-depth: 0 [ok]
FINDINGS:
- [BLOCKER] user_service.ts:38 — Acceptance Criteria — Password is saved as plain text from the request body; hash the password using the crypto provider.
- [MAJOR] user_service.ts:40 — IO in Domain Layer — Direct call to `db.users.save()` found in service logic; inject a repository interface instead.
- [MINOR] user_service.ts:15 — Long Function — Method exceeds 30-line threshold (§1); extract validation logic to a private helper.
- [MINOR] user_service.ts:22 — Primitive Obsession — Passing 5 raw strings; wrap in a `UserRegistrationRequest` DTO.
ACCEPTANCE CRITERIA:
1. Password hashed: not met
2. No direct DB calls: not met
Next steps
- Move the database persistence logic into a dedicated repository class to satisfy the domain layer gate.
- Implement the
bcrypt.hashcall before the persistence step to meet the primary acceptance criterion. - Refactor
registerUserby extracting the validation block to reduce the line count below the §1 limit.
Connects securely to your tools. The creator never sees your data.
About this skill
Standard AI coding assistants often provide vague suggestions without checking your specific team standards. This skill acts as a strict, read-only quality gate that enforces hard metrics and architectural principles on every pull request or file change. It eliminates the subjectivity of code reviews by measuring exact complexity, nesting depth, and SOLID violations.
What it does
- Hard Metric Validation measures function length, cyclomatic complexity, nesting levels, and callback depth against defined thresholds.
- Architectural Auditing scans for SOLID principle violations and specific code smells at the diff boundary.
- Pattern Enforcement identifies missed opportunities for design patterns or flags speculative generality where patterns are applied without a trigger.
- Automated Verdicts issues a formal
APPROVEDorCHANGES_REQUIREDstatus based on the count of blockers and major findings.
How it works
- Target Identification analyzes specified files or runs
git diffto determine the scope of the review. - Contextual Analysis reads callers and callees to ensure domain logic is separated from IO and infrastructure.
- Metric Calculation performs static analysis to generate a report of lines, nesting, and complexity for every function.
- Gate Evaluation checks findings against the gate rulebook and any user-provided acceptance criteria.
Frameworks & tools
This skill works with any codebase where static analysis can be performed. It uses tools like lint, tsc --noEmit, and complexity analyzers to gather raw data before applying its internal logic.
Why this beats prompting it yourself
Generic prompts often miss subtle architectural rot or fail to provide the exact line counts needed for a objective gate. This skill forces a structured output that cites specific rules, ensuring reviews are consistent, data-driven, and repeatable across different developers.
Use cases
- CI/CD Gating to block merges that exceed complexity thresholds.
- Refactoring Audits to ensure new changes don't introduce technical debt.
- Architectural Reviews to verify SOLID compliance in domain layers.
- Acceptance Verification to confirm all feature requirements are met.
Known limitations
Requires read access to the local file system and basic dev tools like git or compilers for full context. It does not perform auto-fixes or modify code.
How to use
Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
Free forever
No account required to browse
Trust & safety
Security scanned
Verified clean 7 days ago
- Free to download with an account
Requires