code-review

Review code changes from multiple perspectives with context bootstrap, depth-tier rigor, and structured findings output.

npx skills add https://github.com/microsoft/hve-core --skill code-review

Code Review — Skill Entry

This SKILL.md is the entrypoint for the Code Review skill.

The skill provides a reusable review workflow for orchestrators and perspective subagents that evaluate code changes across functional, standards, accessibility, PR, security, readiness, and full review perspectives. It centralizes change-brief preparation, review depth selection, severity normalization, and output contract details so that review agents stay thin and consistent.

Shared principles

Review work should stay anchored in evidence and should avoid premature conclusions. Keep the review grounded in file and line evidence, use proportional depth based on risk, read the full diff range before narrowing, and keep factual orientation separate from structured findings.

Normative references

  1. Output Formats — reporting structure, merged report skeleton, and persisted artifact contract.
  2. Severity Taxonomy — severity levels, verdict normalization, and risk classification.
  3. Lens Checklists — perspective-specific review questions for functional, standards, accessibility, PR, security, and readiness reviews.
  4. Context Bootstrap — Tier 0 procedure for proving the change surface, drafting a change brief, and scoping hotspots.
  5. Depth Tiers — basic, standard, and comprehensive verification rigor dials.
  6. Walkthrough Protocol — firm orientation floor, full-diff reading contract, and Register 1 narrative guidance.
  7. Dispatch Loop — human-steered dispatch board, manifest schema, and walk-back loop contract.
  8. Emission Modes — capability-gated dual-mode emission and persisted emission record.
  9. Cross-Skill Forks — specialist review registry and collection-aware gating for follow-up reviews.
  10. Change-Risk Evidence Checklist — advisory evidence categories for selecting review depth with human confirmation.

Skill layout

  • SKILL.md — this file (skill entrypoint).
  • references/ — durable review knowledge documents.
    • output-formats.md — output schema, report skeleton, and persistence behavior.
    • severity-taxonomy.md — severity and verdict normalization model.
    • lens-checklists.md — per-perspective review checklists.
    • context-bootstrap.md — Tier 0 context bootstrap and human-scoping workflow.
    • depth-tiers.md — Tier 1/2/3 verification-depth guidance.
    • walkthrough-protocol.md — orientation-first walkthrough contract and Register 1 narrative expectations.
    • dispatch-loop.md — dispatch board, manifest schema, and walk-back loop.
    • emission-modes.md — native and canonical emission strategies.
    • cross-skill-forks.md — specialist review registry and gating rules.
    • change-risk-model.md — advisory evidence checklist for selecting review depth with human confirmation.

More skills from microsoft

oss-growth
microsoft
OSS growth hacker persona
agent-framework-azure-ai-py
microsoft
Build Azure AI Foundry agents using the Microsoft Agent Framework Python SDK (agent-framework-azure-ai). Use when creating persistent agents with AzureAIAgentsProvider, using hosted tools (code interpreter, file search, web search), integrating MCP servers, managing conversation threads, or implementing streaming responses. Covers function tools, structured outputs, and multi-tool agents.
development
airunway-aks-setup
microsoft
Set up AI Runway on AKS — from bare cluster to running model. Covers cluster verification, controller install, GPU assessment, provider setup, and first deployment. WHEN: "setup AI Runway", "onboard AKS cluster", "install AI Runway", "airunway setup", "deploy model to AKS", "GPU inference on AKS", "KAITO setup on AKS", "run LLM on AKS", "vLLM on AKS", "set up model serving on AKS", "AI Runway controller".
devops
appinsights-instrumentation
microsoft
Guidance for instrumenting webapps with Azure Application Insights. Provides telemetry patterns, SDK setup, and configuration references. WHEN: how to instrument app, App Insights SDK, telemetry patterns, what is App Insights, Application Insights guidance, instrumentation examples, APM best practices.
devops
applicationinsights-web-ts
microsoft
Instrument browser/web apps with the Application Insights JavaScript SDK (@microsoft/applicationinsights-web). Use for Real User Monitoring (RUM) — page views, clicks, AJAX/fetch dependencies, exceptions, custom events, and browser-side GenAI agent traces correlated to backend OpenTelemetry traces. Covers SDK Loader Script and npm setup, framework extensions (React, React Native, Angular), Click Analytics, telemetry initializers, and OTel GenAI semantic conventions for agent/tool/model spans emitted from the browser.
devops
azure-ai-anomalydetector-java
microsoft
Build anomaly detection applications with Azure AI Anomaly Detector SDK for Java. Use when implementing univariate/multivariate anomaly detection, time-series analysis, or AI-powered monitoring.
development
azure-ai-language-conversations-py
microsoft
Implement Conversational Language Understanding (CLU) using the azure-ai-language-conversations Python SDK. Use when working with ConversationAnalysisClient to analyze conversation intent and entities, building NLP features, or integrating language understanding into applications.
development
azure-ai-ml-py
microsoft
Azure Machine Learning SDK v2 for Python. Use for ML workspaces, jobs, models, datasets, compute, and pipelines. Triggers: "azure-ai-ml", "MLClient", "workspace", "model registry", "training jobs", "datasets".
development