ce-code-review

57 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By EveryInc/compound-engineering-plugin (GitHub) · coding · 26,009 stars · scanned at commit dd9b792

Review a named diff or PR for bugs, regressions, tests, and standards. Use when asked to review code or when a shipping skill needs a review receipt. Use when asked to apply this review's findings locally. Use ce-resolve-pr-feedback for feedback already left on a PR.

Works with any agent that supports SKILL.md skills.

What this skill can do

Connects to the internet

The author does not mention this.

Found in 1 place.

skills/ce-code-review/references/personas/reliability-reviewer.md, line 23**Anchor 100** — the gap is mechanical: a `requests.get(url)` with no `timeout=` keyword, an infinite loop with no break, a catch block with `pass` and no log.

Downloads and installs other software

The author does not mention this.

Found in 3 places.

skills/ce-code-review/scripts/cross-model-adversarial-review.sh, line 260command -v npx >/dev/null 2>&1 || { acpx_unavailable shared "npx not found; acpx runs through npx"; return 1; }
skills/ce-code-review/scripts/cross-model-adversarial-review.sh, line 325printf '%s\0' npx -y --package "$(acpx_package_spec)" -- env -u npm_config_package acpx --cwd "$2" --format json --mcp-config "$3" --timeout "$4"
skills/ce-code-review/scripts/cross-model-adversarial-review.sh, line 1121PRE_EGRESS="transport unavailable (pre-egress, route): Antigravity is waiting for a Google sign-in; the agy CLI's sign-in does not carry over, so sign the ACP r

Reads your saved credentials, such as SSH keys or .env files

The author does not mention this.

Found in 1 place.

skills/ce-code-review/scripts/packs-resolve.py, line 271env = dict(os.environ)

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 20 places.

skills/ce-code-review/scripts/packs-resolve.py, line 281return subprocess.run(
skills/ce-code-review/scripts/packs-resolve.py, line 318except subprocess.TimeoutExpired:
skills/ce-code-review/scripts/packs-resolve.py, line 332except subprocess.TimeoutExpired:

Show 17 more

skills/ce-code-review/scripts/packs-resolve.py, line 668proc = subprocess.run(["git", "rev-parse", "--show-toplevel"],
skills/ce-code-review/scripts/packs-resolve.py, line 669stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, text=True)
skills/ce-code-review/scripts/peer-job-runner.py, line 600"""Resume every thread of a CREATE_SUSPENDED process. subprocess.Popen
skills/ce-code-review/scripts/peer-job-runner.py, line 722return subprocess.run(
skills/ce-code-review/scripts/peer-job-runner.py, line 723cmd, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL,
skills/ce-code-review/scripts/peer-job-runner.py, line 1069out = subprocess.run(
skills/ce-code-review/scripts/peer-job-runner.py, line 1100out = subprocess.run(
skills/ce-code-review/scripts/peer-job-runner.py, line 1567"""Argv for subprocess.Popen.
skills/ce-code-review/scripts/peer-job-runner.py, line 1669subprocess.CREATE_NEW_PROCESS_GROUP
skills/ce-code-review/scripts/peer-job-runner.py, line 1676proc = subprocess.Popen(_popen_argv(argv), **popen_kwargs)
skills/ce-code-review/scripts/peer-job-runner.py, line 1832base_flags = subprocess.DETACHED_PROCESS | subprocess.CREATE_NEW_PROCESS_GROUP
skills/ce-code-review/scripts/peer-job-runner.py, line 1836for flags in (base_flags | subprocess.CREATE_BREAKAWAY_FROM_JOB, base_flags):
skills/ce-code-review/scripts/peer-job-runner.py, line 1838proc = subprocess.Popen(
skills/ce-code-review/scripts/review-scope.py, line 87def git(*args: str) -> subprocess.CompletedProcess[str]:
skills/ce-code-review/scripts/review-scope.py, line 88return subprocess.run(
skills/ce-code-review/scripts/review-scope.py, line 181proc = subprocess.run(
skills/ce-code-review/scripts/review-scope.py, line 189except (OSError, subprocess.TimeoutExpired):

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'ce-code-review' ] || [ -L ~/.agents/skills/'ce-code-review' ]; then echo 'A skill folder named ce-code-review already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/EveryInc/compound-engineering-plugin' "$d" && git -C "$d" checkout --quiet 'dd9b7921c9c80498eba84994ff1b8e1e81dbc1db' -- 'skills/ce-code-review' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/ce-code-review' ~/.agents/skills/'ce-code-review' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'ce-code-review' ~/.claude/skills/'ce-code-review' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for EveryInc/compound-engineering-plugin shows the score of its lowest-scoring skill.

SkillTrust badge for EveryInc/compound-engineering-plugin

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/EveryInc/compound-engineering-plugin.svg)](https://zalavijaysinh.github.io/skilltrust/repos/EveryInc/compound-engineering-plugin/)

Score history

Date	Version	Score
2026-11-10	`dd9b792`	57
2026-11-08	`d307bdb`	57
2026-11-06	`173bd33`	77