By vavdb
The future-check code review skill. Triggered by 'review this branch', 'review my PR', 'look at the diff'. Walks an 18-item hunt list (silent failures, unjustified additions, duplicate helpers, parallel-instance config drift, UI-only authz, etc.), runs security and language-specific reviewers in parallel where available, stages fixes, refuses to commit eagerly. Bundles five subagents — `csharp-reviewer`, `database-reviewer` (in-code data access), `database-schema-reviewer` (schema design), `playwright-test-reviewer` (E2E test discipline), `security-reviewer` (mandatory security pass with cascade analysis); suggests (does not auto-install) other companion skills and subagents — see README for the recommended list.
Based on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Vincent-flavored C# / .NET reviewer. Dispatched in parallel by v-review when the diff's primary language is C#. Walks the v-review hunt list through a .NET lens, applies opinionated defaults (no comments, sealed by default, no XML docs, no premature patterns), and reads the project's CLAUDE.md plus any `.claude/rules/csharp/*.md` so project conventions override agent defaults.
Vincent-flavored database-access reviewer. Dispatched in parallel by v-review when the diff touches data-access code — service / repository / handler files that use `DbContext`, `IDbConnection`, EF Core LINQ, Dapper, raw SQL execution, or transaction APIs. Reviews HOW the code talks to the database — query patterns, transaction discipline, connection management, N+1, parameterization. Stops at the schema boundary; schema design lives in `database-schema-reviewer`. Reads the project's CLAUDE.md + `.claude/rules/csharp/*.md` so project conventions override agent defaults.
Vincent-flavored database schema reviewer. Dispatched in parallel by v-review when the diff touches schema — migrations (`Migrations/*.cs`, `*ModelSnapshot.cs`), entity type configurations (`*Configuration.cs`), `OnModelCreating` changes, new `DbSet<T>` additions, or `.sql` DDL files. Reviews schema DESIGN — field types, indexes, constraints, normalization, migration safety, multi-tenant scoping. Stops at the code boundary; query patterns + transactions live in `database-reviewer`. Reads the project's CLAUDE.md + `.claude/rules/csharp/*.md` + `docs/agents/ef-migrations.md` (or equivalent) so project conventions override agent defaults.
Vincent-flavored Playwright E2E test reviewer. Dispatched in parallel by v-review when the diff includes `.spec.ts` / `*-fixtures.ts` / `playwright.config.ts` / `tests/**/*.ts`. Reviews test discipline — semantic selectors, no shotgun timeouts, no force clicks, no retry loops, no swallowed assertions, MudBlazor + Blazor Server timing patterns, test/component `data-testid` consistency. Pairs with `csharp-reviewer` on mixed PRs where both `.razor` and `.spec.ts` change. Reads project CLAUDE.md + `.claude/skills/v-review/test-patterns.md` + `.claude/skills/v-review/anti-patterns.md` (or equivalents) so project conventions override agent defaults.
Vincent-flavored security reviewer. Dispatched in parallel by v-review when the diff touches authentication / authorization / input handling / file uploads / external API integration / cryptography / payment / secrets / migration with data movement. Walks the v-review SKILL.md §16 security checklist with a .NET / ASP.NET Core / Blazor Server / Azure SQL / Auth0-or-custom-passwordless lens. **Strict by default** — security findings are not advisory. Pairs with `csharp-reviewer` on auth config drift cascade, `database-reviewer` on parameterisation + tenant scoping, `database-schema-reviewer` on data-loss migrations + multi-tenant gating. Reads CLAUDE.md + `.claude/rules/common/security.md` + `.claude/rules/<stack>/security.md` so project conventions override agent defaults.
Uses power tools
Uses Bash, Write, or Edit tools
The future-check code review skill for Claude Code.
A current-check review asks does it work today? — builds, tests, demo. A future-check review asks what does this lock the team into for the next six months? This skill is the second question, asked with the same tools the first one had — minus the deference, minus the schedule pressure, plus the willingness to say no.
Activated when you ask Claude to review a branch, PR, commit, or staged diff. v-review then:
CLAUDE.md, AGENTS.md, and any .claude/rules/ files so project conventions override anything in the skill.security-reviewer when auth is touched, code-reviewer as an independent second opinion, language-specific reviewers (csharp-reviewer, typescript-reviewer, etc.), database-reviewer for migrations, and chains differential-review, finding-duplicate-functions, insecure-defaults, semgrep, codeql where the diff signals warrant it.sealed, mis-named Try* methods, hand-edited generated artifacts (migrations, lockfiles), useless imports, the full security checklist, leftover artifacts, and architecture-doc/code contradictions.git add and stops. The author reviews staged diffs before they land — committing eagerly turns review into post-mortem.Was → Now table per finding, severity tags (CRITICAL/HIGH/MEDIUM/LOW), unfixed-but-flagged issues, considered-but-deliberately-left calls with one-sentence reasoning, the skills + subagents invoked with headline outputs, and the exact build + test commands run with pass/fail.The skill is opinionated. It refuses additions with no stated reason, calls out UI-only authorization, flags any migration that moves data without backfill as a data-loss event, and rewrites domain-language drift (e.g. "tenant" terminology in single-instance codebases) without ceremony. If you can't defend a line in one sentence, it goes.
The repository ships its own single-plugin marketplace, so a one-liner resolves cleanly:
/plugin install vavdb/v-review
This clones the repo, registers the vavdb marketplace, installs the v-review plugin, and exposes the bundled subagents (csharp-reviewer, database-reviewer, database-schema-reviewer, playwright-test-reviewer, security-reviewer) without further steps. Restart Claude Code if it doesn't pick the plugin up immediately.
If the one-liner fails or you want a checked-out copy you can edit:
git clone https://github.com/vavdb/v-review.git ~/.claude/plugins/v-review
# or, install just the orchestrator skill globally (without the bundled subagents):
git clone https://github.com/vavdb/v-review.git /tmp/v-review-src
cp -r /tmp/v-review-src/skills/v-review ~/.claude/skills/v-review
After install, restart Claude Code and the skill registers as v-review.
/plugin install vavdb/v-review does NOT auto-install the companions listed in Recommended companions — Claude Code's plugin manager doesn't read the recommendedCompanions field in .claude-plugin/plugin.json for dependency resolution. v-review degrades gracefully when they're missing (the pre-flight availability check prints which are available and which it's skipping), but you get fuller coverage with them installed.
Two ways to install them:
1. Tell Claude to do it in natural language. In a fresh session after installing v-review, say something like:
install vavdb/v-review's recommended companion plugins
Claude reads the README's Recommended companions table and runs /plugin install <each> for the ones you don't already have. Not a built-in plugin-manager command — just NL plus Claude reading documentation.
2. Install each one yourself. Install only those whose stack you use — companion list reflects the maintainer's stack (.NET / Blazor / MudBlazor / EF Core / Azure SQL).
Plugins (one /plugin install per line, from inside Claude Code):
# anthropic marketplace (preinstalled with Claude Code)
/plugin install microsoft-docs@claude-plugins-official # .NET / Azure / EF Core API verification
/plugin install pr-review-toolkit@claude-plugins-official # silent-failure-hunter, comment-analyzer, pr-test-analyzer, type-design-analyzer
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimnpx claudepluginhub vavdb/v-review --plugin v-reviewComprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.
Upstash Context7 MCP server for up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your LLM context.
Harness-native ECC operator layer - 67 agents, 271 skills, 92 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
Develop, test, build, and deploy Godot 4.x games with Claude Code. Includes GdUnit4 testing, web/desktop exports, CI/CD pipelines, and deployment to Vercel/GitHub Pages/itch.io.
Comprehensive PR review agents specializing in comments, tests, error handling, type design, code quality, and code simplification
Ultra-compressed communication mode. Cuts ~75% of tokens while keeping full technical accuracy by speaking like a caveman.