Herramientas

Has the agent follow a 'don't write it if you can avoid it' ladder: ask if it's needed, then reuse existing code, the standard library, platform features and installed dependencies, writing only the minimum while keeping validation, error handling, security and accessibility.

Six specialized review subagents that check comment accuracy, test coverage, silent failures, type design, code style and simplification opportunities. Run them individually or all at once. Official Anthropic plugin.

Reviews code changes before merge across five axes: correctness, readability, architecture, security and performance. Works on code and PRs from you, other agents or other people, judged by whether they improve overall code health. Part of Addy Osmani's agent-skills.

Alibaba's open-source AI code review CLI (ocr): a deterministic pass filters and groups files and matches rules, then an agent reads the context and writes line-level comments; ocr scan reviews a whole directory. Needs an LLM endpoint, or delegate mode to hand off to your coding agent.

Alibaba's open-source AI code review tool: reads the Git diff, groups changed files for parallel review by subagents and returns line-level comments; the plugin adds review and delegated review commands. Install the ocr CLI and configure a model first; delegated mode needs no API key.

Drives Alibaba's open-source ocr CLI to review Git changes (working tree, a commit or a branch diff), grouping line-level comments by severity and fixing them on request. Needs an LLM endpoint (Anthropic, OpenAI and other protocols); installs the CLI if missing. By Alibaba.

Simplifies and tidies recently changed code without changing behavior: reduces nesting and redundancy, improves naming and follows the project conventions in CLAUDE.md. Official Anthropic plugin.

Runs React Doctor via npx to scan React code for security, performance, correctness, accessibility and architecture issues with a 0-100 health score; checks changed code for regressions, and on /doctor fetches the official triage playbook to fix issues.

Audits a whole React codebase read-only: runs a React Doctor scan as evidence, vets findings across bugs, performance, accessibility, security and maintainability, ranks them by leverage, then writes self-contained plans other agents can execute. Never edits source.

Runs an extremely strict maintainability review of the current branch: hunts for restructurings that make the change dramatically simpler and flags files pushed past 1,000 lines, ad-hoc conditionals, thin wrappers and needless casts. From Cursor's official plugins; invoke manually.

Linter and formatter for 20+ SQL dialects that auto-fixes most issues and handles Jinja templating and dbt projects (dbt needs a plugin), suited to warehouse code review and CI.

Uses a strong model to audit your codebase and list evidence-backed issues across correctness, security, performance and testing, writes a plan a cheaper model can execute, and reviews the results. It never edits code itself. By shadcn.

Skills Sentry's engineering team uses itself: code review, bug finding, security review, writing commits and PRs, and iterating on a PR until CI passes. Maintained by Sentry; some skills follow its internal conventions.

Official SonarSource server: connects to SonarQube Server or Cloud so agents can query code issues, quality gates, security hotspots and dependency risks, and analyze file contents directly. Needs a SonarQube token; Docker is the recommended way to run it.

Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.