# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for Full-stack / Indie or ML / AI, Tagged `code-review`: 56 items. > - Full-stack / Indie: General software work: coding-agent workflows, code review, debugging and Git collaboration. > - ML / AI: Model training, evaluation and LLM application development. - [Superpowers](https://hebbmind.com/fr/plugin/superpowers.md): [Plugin] A complete development methodology for coding agents: brainstorm to clarify requirements, write an implementation plan, then build with subagents, with red-green TDD, systematic debugging and code review throughout. In the official Claude Code and Codex marketplaces. - [Superpowers](https://hebbmind.com/fr/skill/superpowers.md): [Skill] A full development methodology for coding agents: brainstorm a design, break it into an implementation plan, dispatch subagents to build and review each task, with mandatory TDD and systematic debugging. Installed as a plugin, it injects its bootstrap automatically. - [mattpocock/skills](https://hebbmind.com/fr/plugin/mattpocock-skills.md): [Plugin] Matt Pocock's engineering skills: /grill-me interrogates requirements to align on intent, then a spec-and-ticket flow, TDD, code review and domain modeling. Small, composable skills, listed in the official Claude Code plugin marketplace. - [Skills For Real Engineers (Matt Pocock)](https://hebbmind.com/fr/skill/mattpocock-skills.md): [Skill] Matt Pocock's engineering skills: grill-me interrogates you to align on requirements, to-spec turns discussion into a spec, to-tickets breaks it into tickets, plus tdd, diagnosing-bugs, code-review and more. Run setup-matt-pocock-skills once per repo first. - [Code Review](https://hebbmind.com/fr/plugin/code-review.md): [Plugin] Reviews pull requests with several parallel subagents, scores each finding by confidence to filter out false positives, and can post the results as PR comments. Official Anthropic plugin; requires a logged-in GitHub CLI. - [Claude Code](https://hebbmind.com/fr/cli/claude-code.md): [CLI] Anthropic's terminal coding agent: understands your codebase, edits code, runs commands and handles git workflows, with plugins, MCP and a headless mode (claude -p). Sign in with a Claude account or set an API key. - [GitHub CLI](https://hebbmind.com/fr/cli/gh.md): [CLI] GitHub's official CLI: manage pull requests, issues, releases and Actions workflows from the terminal. Most commands support --json output that agents can parse, and an official agent skill is available. Run gh auth login first. - [Claude Security](https://hebbmind.com/fr/plugin/claude-security.md): [Plugin] Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin. - [GitHub MCP Server](https://hebbmind.com/fr/mcp/github.md): [MCP] GitHub's official MCP server: lets agents read and write repositories and code, manage issues and pull requests, and check Actions workflows and code-scanning alerts. Use the hosted remote server or run it locally in Docker; needs a personal access token or OAuth. - [Trail of Bits Skills](https://hebbmind.com/fr/skill/trailofbits-skills.md): [Skill] Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace. - [Subagent-Driven Development](https://hebbmind.com/fr/skill/subagent-driven-development.md): [Skill] Follows an implementation plan by dispatching a fresh subagent for each task, reviewing each for spec compliance and code quality, then doing a final overall review. From Superpowers; use with its code-review and branch-finishing skills. - [Requesting Code Review](https://hebbmind.com/fr/skill/requesting-code-review.md): [Skill] Before finishing a task or merging, dispatches an independent reviewer subagent over a git commit range to check the work against the plan and requirements, then handles feedback by severity: critical, important, minor. Part of obra/superpowers. - [Ponytail](https://hebbmind.com/fr/skill/ponytail.md): [Skill] Has the agent follow a 'don't write it if you can avoid it' ladder: ask if it's needed, then reuse existing code, the standard library, platform features and installed dependencies, writing only the minimum while keeping validation, error handling, security and accessibility. - [Feature Dev](https://hebbmind.com/fr/plugin/feature-dev.md): [Plugin] A seven-phase feature development workflow: clarify requirements, explore the codebase with parallel subagents, design the architecture, implement, then run a quality review. Start it with /feature-dev. Official Anthropic plugin. - [PR Review Toolkit](https://hebbmind.com/fr/plugin/pr-review-toolkit.md): [Plugin] Six specialized review subagents that check comment accuracy, test coverage, silent failures, type design, code style and simplification opportunities. Run them individually or all at once. Official Anthropic plugin. - [gstack](https://hebbmind.com/fr/skill/gstack.md): [Skill] Skill pack from YC president Garry Tan: slash commands such as /office-hours, /plan-ceo-review, /review, /qa and /ship play CEO, engineering manager, designer, QA and release engineer. Needs Git and Bun; clone the repo and run ./setup as the README describes. - [Agent Skills](https://hebbmind.com/fr/plugin/agent-skills.md): [Plugin] Addy Osmani's production-grade engineering skill pack covering spec, planning, implementation, testing, review and shipping, with commands like /spec, /plan, /build, /test, /review and /ship. Supports both Claude Code and Codex. - [Agent Skills (Addy Osmani)](https://hebbmind.com/fr/skill/addyosmani-agent-skills.md): [Skill] Engineering skill collection spanning define, plan, build, verify, review and ship, with /spec, /plan, /build, /test, /review and /ship commands, including TDD, code review and web performance audits. By Addy Osmani. - [Code Review and Quality](https://hebbmind.com/fr/skill/code-review-and-quality.md): [Skill] Reviews code changes before merge across five axes: correctness, readability, architecture, security and performance. Works on code and PRs from you, other agents or other people, judged by whether they improve overall code health. Part of Addy Osmani's agent-skills. - [Open Code Review](https://hebbmind.com/fr/plugin/open-code-review.md): [Plugin] Alibaba's open-source AI code review tool: reads the Git diff, groups changed files for parallel review by subagents and returns line-level comments; the plugin adds review and delegated review commands. Install the ocr CLI and configure a model first; delegated mode needs no API key. - [Open Code Review](https://hebbmind.com/fr/cli/open-code-review.md): [CLI] Alibaba's open-source AI code review CLI (ocr): a deterministic pass filters and groups files and matches rules, then an agent reads the context and writes line-level comments; ocr scan reviews a whole directory. Needs an LLM endpoint, or delegate mode to hand off to your coding agent. - [Open Code Review](https://hebbmind.com/fr/skill/open-code-review.md): [Skill] Drives Alibaba's open-source ocr CLI to review Git changes (working tree, a commit or a branch diff), grouping line-level comments by severity and fixing them on request. Needs an LLM endpoint (Anthropic, OpenAI and other protocols); installs the CLI if missing. By Alibaba. - [GitLab](https://hebbmind.com/fr/plugin/gitlab.md): [Plugin] Connects GitLab's official remote MCP server (beta) so Claude can work with repos, merge requests, CI/CD pipelines, issues and wikis on GitLab.com. MCP access must be enabled on the top-level group, with browser OAuth. In Anthropic's official plugin marketplace. - [Code Simplifier](https://hebbmind.com/fr/plugin/code-simplifier.md): [Plugin] Simplifies and tidies recently changed code without changing behavior: reduces nesting and redundancy, improves naming and follows the project conventions in CLAUDE.md. Official Anthropic plugin. - [GitHub](https://hebbmind.com/fr/plugin/github.md): [Plugin] Connects GitHub's official remote MCP server to manage issues and PRs, review code, search repos and call the GitHub API from Claude Code. Requires GITHUB_PERSONAL_ACCESS_TOKEN. - [wshobson/agents](https://hebbmind.com/fr/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content. - [Agent Teams](https://hebbmind.com/fr/plugin/agent-teams.md): [Plugin] Orchestrates multi-agent teams using Claude Code's experimental Agent Teams feature: parallel multi-angle code review, competing-hypothesis debugging and feature work split by file ownership. Enable CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS first. - [Security Guidance](https://hebbmind.com/fr/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [Codex plugin for Claude Code](https://hebbmind.com/fr/plugin/codex-plugin-cc.md): [Plugin] Calls Codex from Claude Code for read-only or adversarial code reviews, or delegates tasks to Codex to run in the background. Maintained by OpenAI; needs a ChatGPT account (the free tier works) or an API key. - [Engineering](https://hebbmind.com/fr/plugin/engineering.md): [Plugin] Everyday software engineering plugin: standup summaries, code review, structured debugging, architecture decision records, incident response and pre-deploy checks. Official from Anthropic, built mainly for Cowork but also usable in Claude Code. - [Compound Engineering](https://hebbmind.com/fr/plugin/compound-engineering-plugin.md): [Plugin] Every's compound engineering workflow: brainstorm, plan, execute, simplify and review, then capture what was learned as docs for future work. Includes 36 skills and supports Claude Code, Codex and a dozen other hosts. - [Improve React](https://hebbmind.com/fr/skill/improve-react.md): [Skill] Audits a whole React codebase read-only: runs a React Doctor scan as evidence, vets findings across bugs, performance, accessibility, security and maintainability, ranks them by leverage, then writes self-contained plans other agents can execute. Never edits source. - [React Doctor](https://hebbmind.com/fr/skill/react-doctor.md): [Skill] Runs React Doctor via npx to scan React code for security, performance, correctness, accessibility and architecture issues with a 0-100 health score; checks changed code for regressions, and on /doctor fetches the official triage playbook to fix issues. - [Claude Skills (Fullstack Dev Skills)](https://hebbmind.com/fr/plugin/jeffallan-claude-skills.md): [Plugin] Bundles 60+ full-stack specialist skills into one plugin: experts for 12 languages including Python, TypeScript, Go, Rust and Java, and frameworks like React, Django and Spring Boot, activated automatically by request. Also includes Jira and Confluence workflow commands (needs Atlassian MCP). - [Thermo-Nuclear Code Quality Review](https://hebbmind.com/fr/skill/thermo-nuclear-code-quality-review.md): [Skill] Runs an extremely strict maintainability review of the current branch: hunts for restructurings that make the change dramatically simpler and flags files pushed past 1,000 lines, ad-hoc conditionals, thin wrappers and needless casts. From Cursor's official plugins; invoke manually. - [PAL MCP](https://hebbmind.com/fr/mcp/pal-mcp-server.md): [MCP] Lets Claude Code, Codex and other agents call Gemini, GPT, Ollama and other models to collaborate on code review, debugging, planning and multi-model consensus, and can bridge to other CLI agents. Configure at least one provider (API key or local Ollama). Formerly Zen MCP. - [Codex Security](https://hebbmind.com/fr/cli/codex-security.md): [CLI] OpenAI's official security CLI and TypeScript SDK: scans codebases to find, validate and fix security vulnerabilities, and can draft a SECURITY.md policy. Needs Node.js 22.13+, Python 3.10+, and a ChatGPT sign-in or API key. - [visual-explainer](https://hebbmind.com/fr/skill/visual-explainer.md): [Skill] Turns architecture explanations, diff reviews, plan reviews and data comparisons into self-contained HTML pages or slides with Mermaid diagrams and light and dark themes, replacing ASCII diagrams in the terminal. - [visual-explainer](https://hebbmind.com/fr/plugin/visual-explainer.md): [Plugin] Turns terminal output like architecture explanations, diff reviews and plan comparisons into styled HTML pages or slides with zoomable interactive Mermaid diagrams, replacing hard-to-read ASCII diagrams and tables. No build step; open directly in a browser. - [Plannotator](https://hebbmind.com/fr/plugin/plannotator.md): [Plugin] Annotate and review agent-generated plans, docs and code diffs in the browser, then send feedback back to the agent in one click. Hooks into plan mode and supports Claude Code, Codex and other agents. Run the official install script to set up the CLI first. - [improve](https://hebbmind.com/fr/plugin/improve.md): [Plugin] Uses a strong model to audit your codebase and list evidence-backed issues across correctness, security, performance and testing, writes a plan a cheaper model can execute, and reviews the results. It never edits code itself. By shadcn. - [Differential Review](https://hebbmind.com/fr/skill/differential-review.md): [Skill] From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report. - [Defending Code Reference Harness](https://hebbmind.com/fr/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained. - [Codex Security](https://hebbmind.com/fr/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access. - [Waza](https://hebbmind.com/fr/plugin/waza.md): [Plugin] Tw93's lean pack of engineering-habit skills: /think to pressure-test plans, /hunt for root causes, /check to review diffs, /ui for frontend interfaces, /write to polish Chinese and English prose, and more (8 skills). Works with both Claude Code and Codex. - [Visual PR](https://hebbmind.com/fr/skill/visual-pr.md): [Skill] Creates or updates a pull request description that explains why the change exists in one sentence, flags up to three things to note, and outlines the implementation with diff-style file, component and call trees. Uses the GitHub CLI; runs only when invoked by name. - [PR Lens](https://hebbmind.com/fr/skill/pr-lens.md): [Skill] Draws a code change or part of a codebase as an animated architecture or data-flow diagram. The agent writes a JSON graph, validates and renders it to SVG with the PR Lens CLI, then pushes it to a prlens.dev canvas or attaches it to a GitHub, GitLab or Bitbucket pull request. - [GitLab MCP Server](https://hebbmind.com/fr/mcp/gitlab-mcp.md): [MCP] Community-maintained GitLab MCP server: manage projects, merge requests, issues, pipelines, wikis and releases, with support for self-hosted instances and a read-only mode. Needs a GitLab personal access token or OAuth. - [gh-stack](https://hebbmind.com/fr/skill/gh-stack.md): [Skill] Manages stacked branches and dependent pull requests with the gh stack GitHub CLI extension: splits work into layered branches with one PR each, then handles push, submit, sync, rebase and merge, using flags that keep commands non-interactive for agents. Official GitHub skill. - [Sentry Skills](https://hebbmind.com/fr/skill/getsentry-skills.md): [Skill] Skills Sentry's engineering team uses itself: code review, bug finding, security review, writing commits and PRs, and iterating on a PR until CI passes. Maintained by Sentry; some skills follow its internal conventions. Next page: https://hebbmind.com/fr/tools.md?page=2&profession=fullstack%2Calgorithm&tag=code-review