From forge-skills
Performs pre-release readiness reviews of Atlassian Forge apps: manifest/module wiring, architecture, runtime compatibility, dependencies, tests, deploy hygiene, and security/cost/reliability smells.
How this skill is triggered — by the user, by Claude, or both
Slash command
/forge-skills:forge-app-reviewThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Run a general Forge release-readiness review. This skill is the front door for broad app review, not a replacement for specialist security, cost, or debugging skills.
Run a general Forge release-readiness review. This skill is the front door for broad app review, not a replacement for specialist security, cost, or debugging skills.
Use this skill for:
Use another skill instead when the user's primary intent is:
forge-security-review.forge-cost-optimizer.forge-debugger.If a broad review finds a deep security/cost/debug concern, include it as a handoff recommendation rather than duplicating the specialist workflow.
manifest.yml or manifest.yaml.
package.json.
resolver.define, handler exports, product API calls, storage usage, external fetches, logging, error handling.invoke() patterns, bridge usage, loading/error states.resolver.define() names.forge lint, build, deploy, or install.Only flag obvious signals and recommend forge-security-review for deep validation:
api.asApp() in user-triggered resolvers without obvious authorization checks.Only flag obvious signals and recommend forge-cost-optimizer for deep analysis:
invoke() calls on page load.ignoreSelf where applicable.Only flag readiness gaps; use forge-debugger when there is an observed failure:
forge lint.Return a concise Markdown report:
# Forge App Review Results
## Summary
- Readiness: Ready | Needs changes | Blocked
- Highest-risk area: <manifest | resolver wiring | permissions | dependencies | tests | operational hygiene>
- Files inspected: <short list>
- Specialist handoffs: <none | security | cost | debugger>
## Findings
1. [Critical | Warning | Info] <title>
- Evidence: `<file:line>` and observed pattern
- Impact: <why this affects readiness>
- Recommendation: <specific fix or specialist handoff>
## Clean Areas
- <important categories checked with no issues>
## Suggested Next Step
- <apply fixes | run specialist review | deploy/lint/test command>
If there are no findings, say the app looks ready from this general review and list any residual specialist reviews that were intentionally out of scope.
npx claudepluginhub atlassian/forge-skills --plugin forge-skillsPerforms an automated white-box security review of Atlassian Forge apps with structured rules, static analysis, and evidence-driven reporting.
Final code review skill: runs stack-specific tests/lints (Next.js, Python, Swift, Kotlin), security checks, verifies spec.md criteria, audits hub files, issues ship/no-go verdict after /build or /deploy.
Runs an 8-dimension project health audit covering security, dependencies, code quality, architecture, performance, infrastructure, docs, and mesh analytics. Delegates to specialist skills and produces a consolidated health score and action plan.