reviewing-changes

작성자: bitwarden

Android-specific code review checklist and MVVM/Compose pattern validation for Bitwarden Android — use this for any review task, even if the user doesn't…

npx skills add https://github.com/bitwarden/android --skill reviewing-changes

Reviewing Changes - Android Additions

This skill provides Android-specific workflow additions that complement the base bitwarden-code-reviewer agent standards.

Instructions

IMPORTANT: Work systematically through each step before providing feedback. Each checklist file includes structured thinking guidance for its review passes.

Step 1: Retrieve Additional Details

Retrieve any additional information linked to the pull request using available tools (JIRA MCP, GitHub API).

If pull request title and message do not provide enough context, request additional details from the reviewer:

  • Link a JIRA ticket
  • Associate a GitHub issue
  • Link to another pull request
  • Add more detail to the PR title or body

Android metadata checks — flag as ❓ if any of these are missing:

  • PR includes *Screen.kt or Composable changes but has no screenshots
  • PR adds new ViewModel or Repository but has no test plan or test file changes

Step 2: Detect Change Type with Android Refinements

Use the base change type detection from the agent, with Android-specific refinements:

Android-specific patterns:

  • Feature Addition: New ViewModel, new Repository, new @Composable functions, new *Screen.kt files
  • UI Refinement: Changes only in *Screen.kt, *Composable.kt, ui/ package files
  • Infrastructure: Changes to .github/workflows/, gradle/, build.gradle.kts, libs.versions.toml
  • Dependency Update: Changes only to libs.versions.toml or build.gradle.kts with version bumps

Step 3: Load Appropriate Checklist

Based on detected type, read the relevant checklist file:

  • Dependency Updatechecklists/dependency-update.md (expedited review)
  • Bug Fixchecklists/bug-fix.md (focused review)
  • Feature Additionchecklists/feature-addition.md (comprehensive review)
  • UI Refinementchecklists/ui-refinement.md (design-focused review)
  • Refactoringchecklists/refactoring.md (pattern-focused review)
  • Infrastructurechecklists/infrastructure.md (tooling-focused review)

The checklist provides:

  • Multi-pass review strategy
  • Type-specific focus areas
  • What to check and what to skip
  • Structured thinking guidance

Step 4: Execute Review Following Checklist

Follow the checklist's multi-pass strategy, thinking through each pass systematically.

Step 5: Consult Android Reference Materials As Needed

Load reference files only when needed for specific questions:

  • Re-reviews → invoke reviewing-incremental-changes agent skill; scope to changed lines only, do not flag new issues in unchanged code
  • Issue prioritizationreference/priority-framework.md (Critical vs Suggested vs Optional)
  • Phrasing feedbackreference/review-psychology.md (questions vs commands, I-statements)
  • Architecture questionsreference/architectural-patterns.md (MVVM, Hilt DI, module org, error handling)
  • Security questions (quick reference)reference/security-patterns.md (common patterns and anti-patterns)
  • Security questions (comprehensive)docs/ARCHITECTURE.md#security (full zero-knowledge architecture)
  • Testing questionsreference/testing-patterns.md (unit tests, mocking, null safety)
  • UI questionsreference/ui-patterns.md (Compose patterns, theming)
  • Style questions (project-specific)reference/style-patterns.md (Kotlin rules enforced in review)
  • Style questions (general)docs/STYLE_AND_BEST_PRACTICES.md

Core Principles

  • Priority order: Security → Correctness → Breaking Changes → Performance → Maintainability
  • Appropriate depth: Match review rigor to change complexity and risk
  • Specific references: Always use file:line_number format for precise location
  • Actionable feedback: Say what to do and why, not just what's wrong
  • Efficient reviews: Use multi-pass strategy, skip what's not relevant
  • Android patterns: Validate MVVM, Hilt DI, Compose conventions, Kotlin idioms

bitwarden의 다른 스킬

analyzing-git-sessions
bitwarden
특정 기간이나 커밋 범위 내의 Git 커밋과 변경 사항을 분석하여 코드 리뷰, 회고, 작업 로그 또는 세션을 위한 구조화된 요약을 제공합니다.
official
figma-to-angular
bitwarden
이 스킬은 Figma 디자인 스펙을 Bitwarden Clients 모노레포 내에서 Storybook 스토리와 함께 완전히 구현된 Angular 컴포넌트로 변환합니다. 출력물은 모든 코드베이스 규칙을 따르면서 시각적으로 디자인과 일치해야 합니다.
official
agent-access
bitwarden
Retrieve login credentials, API keys, and secrets (username, password, TOTP) from the user's Bitwarden vault via aac. Use when you need credentials to sign…
official
action-audit
bitwarden
조직 전반의 GitHub Actions 사용을 감사합니다. 특정 액션을 검색하거나(인시던트 모드) 모든 워크플로 파일을 스캔하여 비준수 액션을 찾습니다…
official
action-remediate
bitwarden
Remediate GitHub Actions action findings identified by the action-audit skill. Applies the appropriate fix per action type — `@main` ref for internal…
official
analyzing-code-security
bitwarden
이 스킬은 사용자가 "코드의 보안 문제를 분석"하거나, "OWASP 취약점을 확인"하거나, "CWE Top 25에 대해 코드를 검토"하도록 요청할 때 사용해야 합니다. "찾…
official
applying-bitwarden-branding
bitwarden
Apply Bitwarden brand standards — logo usage, color palette, typography, iconography, and capitalization rules — grounded in bitwarden.com/brand and the…
official
architecting-solutions
bitwarden
Architecting solutions at the team level while staying coherent with Bitwarden's holistic architecture. Covers security mindset, architectural judgment,…
official