Review
- 1 installs
- 2 repo stars
- Updated April 19, 2026
- shiplightai/claude-code-plugin
Assess an app and recommend the right mix of design, security, privacy, compliance, resilience, performance, SEO, and GEO reviews to run.
About
An orchestrator that reads a project's stack and recent changes, then recommends which Shiplight review categories to run. A developer uses it for a pre-launch readiness assessment or when they want a comprehensive review but do not know where to start.
- Interactive triage, full-suite, or targeted modes
- Auto-detects compliance markers and recent git changes
Review by the numbers
- 1 all-time installs (skills.sh)
- Ranked #984 of 1,352 Code Review & Quality skills by installs in the Skillselion catalog
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/shiplightai/claude-code-plugin --skill reviewAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 1 |
|---|---|
| repo stars | ★ 2 |
| Last updated | April 19, 2026 |
| Repository | shiplightai/claude-code-plugin ↗ |
What it does
Assess an app and recommend the right mix of design, security, privacy, compliance, resilience, performance, SEO, and GEO reviews to run.
Files
Review Orchestrator
When to use
- User wants a comprehensive review but doesn't know where to start
- Pre-launch readiness assessment
- Post-incident review planning
- New team member wants to understand review coverage
How it works
Three modes:
- Interactive triage (default) — asks context questions, recommends a review plan
- Full suite (
/shiplight:review --all) — runs all applicable categories - Targeted — user invokes a specific review directly
Steps
1. Gather context
- Read the project: tech stack, framework, package.json, routes, components
- Check git diff for recent changes
- Look for existing review reports in
shiplight/reports/ - Check for compliance markers (HIPAA mentions, PCI references, GDPR cookies)
2. Ask targeted questions (max 4)
Ask one at a time, with auto-detected defaults:
1. What type of application? (SaaS, healthcare, fintech, e-commerce, internal tool, marketing site, API-only) 2. What triggered this review? (pre-launch, new feature, dependency update, security incident, audit prep, routine) 3. Any compliance requirements? (none, HIPAA, SOC2, PCI-DSS, GDPR, multiple) — auto-detect from codebase 4. Specific concerns? (open-ended, optional)
3. Generate review plan
Based on answers, categorize all 8 review types as:
- CRITICAL — must run, high risk of issues
- RECOMMENDED — should run, meaningful value
- OPTIONAL — nice to have
Present the plan with rationale for each recommendation. Include estimated depth (quick/standard/thorough) for each.
SEO vs GEO prioritization by product type:
| Product type | SEO | GEO |
|---|---|---|
| Developer tools, API products, SaaS | RECOMMENDED | CRITICAL |
| E-commerce, local business, marketplace | CRITICAL | OPTIONAL |
| Content/media, documentation, blog | CRITICAL | CRITICAL |
| Internal tools | — | — |
Provide a decision matrix table:
| Review | Priority | Rationale | Depth |
|---|---|---|---|
| /shiplight:security-review | CRITICAL | New auth feature + SaaS app | thorough |
| /shiplight:privacy-review | CRITICAL | Handles user PII, GDPR applies | standard |
| etc. |
4. Execute
Ask: "Run all CRITICAL reviews now? [Y/n] Or pick specific ones."
Run selected reviews sequentially. After each, show a brief summary before proceeding to the next.
5. Unified report
After all reviews complete, generate a unified report:
- Overall readiness score (0-10)
- Per-category scores
- Top 5 findings across all categories (by severity)
- Regression test summary (total YAML tests generated)
- Report saved to
shiplight/reports/review-{date}.md
Available Reviews
| Skill | Category | What it checks |
|---|---|---|
/shiplight:design-review | Visual/UI | Responsive, a11y, design consistency, i18n readiness |
/shiplight:security-review | Security | OWASP Top 10, auth, headers, supply chain, pen testing |
/shiplight:privacy-review | Privacy | PII handling, tracking, data flow, consent |
/shiplight:compliance-review | Compliance | HIPAA, SOC2, PCI-DSS, GDPR checklists |
/shiplight:resilience-review | Reliability | Error handling, degradation, API contracts |
/shiplight:performance-review | Performance | Core Web Vitals, bundle size, runtime perf |
/shiplight:seo-review | Discoverability | Meta tags, structured data, crawlability |
/shiplight:geo-review | AI Discoverability | LLM citation readiness, entity authority, structured claims |
Report Format
All review skills produce reports in a consistent format saved to shiplight/reports/{review-name}-{date}.md. The orchestrator merges these into a unified report.
Tips
- Run
/shiplight:reviewbefore every major launch - Individual reviews can be invoked directly when you know what you need
- Review reports accumulate over time — the orchestrator can show trends
- YAML regression tests from reviews accumulate in
shiplight/tests/
Related skills
Improve Codebase ArchitectureSafely deepen clusters of shallow modules into cohesive, testable units while respecting their external dependencies.566k196k
Caveman ReviewGet ultra-compressed, one-line code review comments that cut noise while keeping every actionable fix.270k94.7kCodebase DesignShared vocabulary for designing deep modules: improve a module's interface, find deepening opportunities, decide where a seam goes, make code more testable.266k196kCavecrewDelegate coding tasks to specialized subagents that return compressed output, keeping the main context window usable for much longer sessions.220k94.7kCode ReviewReviews a branch or PR diff on two axes at once: conformance to coding standards plus a code-smell baseline, and whether it actually implements the original spec.201k196k
Requesting Code ReviewDispatch a consistent, high-signal code reviewer subagent that catches plan deviations and quality issues before merging or continuing development.183k264k