geniro-review

Code review skill

Contents

• Your role — orchestrate, don't review
• State machine
• Loop invariants
• Anti-rationalization
• Budgets — quality-first
• ACI per-phase tool surface
• Definition of done
• Spec metadata contract
• Subagent model tiering
• Memory I/O schedule
• Phase 1 / 1.5 / 2 / 3 / 4 / 5 / 6 — one section each, pointing at that phase's file
• REFERENCE

This file is the spine — role, invariants, gates, phase map. Read the phase's Steps on entry to that phase, from ${CLAUDE_PLUGIN_ROOT}/skills/review/: phase-1-triage.md (Phases 1 + 1.5) · phase-2-spawns.md (Phase 2) · phase-3-4-filter-stratify.md (Phases 3 + 4) · phase-5-6-emit-handoff.md (Phases 5 + 6). That Read is the phase's physically-first action and carries a one-line echo, per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/phase-entry-read.md — the phase files hold this skill's gates and its helper call sites, so work started before the Read runs outside them.

Runtime portability. ${CLAUDE_PLUGIN_ROOT} is a path placeholder Claude Code substitutes into file references, never a shell export — it reads empty in a Bash call under every host, Claude Code included, so an empty probe is no evidence of another runtime (CLAUDECODE in the environment marks Claude Code). Resolve the root by working these in order: the ancestor directory of this file containing .claude-plugin/plugin.json; a copy of the referenced file sitting beside this one (the Cursor build ships each skill's own phase and reference files there); a plugin checkout inside the workspace. Substitute the resolved root for every ${CLAUDE_PLUGIN_ROOT} occurrence and export it as CLAUDE_PLUGIN_ROOT in every Bash call. Work the rungs with a command, not a judgment: the run's first Bash call lists the directory this file was read from and each candidate root, and its output is echoed verbatim before anything else. Read the rungs against that output — a path it does not show did not resolve, and a file it does not show cannot be read, however confidently a later step would report otherwise. A ladder that resolves is bookkeeping, not a finding: keep the echo to the probe output and the resolved root, and reserve a degraded-run notice for a rung that actually failed. Read ${CLAUDE_PLUGIN_ROOT}/skills/_shared/runtime-portability.md before deciding a step cannot run here: it substitutes mechanisms, not steps, and routes a host with no one to ask to ${CLAUDE_PLUGIN_ROOT}/skills/_shared/non-interactive-host.md. When no rung resolves, the files are missing but the contract is not — open your first message by naming what is unavailable, run every phase and gate this skill declares, never let the project's own rules stand in for its decision gates, and take no outward-facing action (ready-for-review PR, merge, force-push, protected-branch push, posted comment, tracker transition) without an explicit answer.