# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Tagged `code-review`: 73 items. - [Superpowers](https://hebbmind.com/ko/plugin/superpowers.md): [Plugin] A complete development methodology for coding agents: brainstorm to clarify requirements, write an implementation plan, then build with subagents, with red-green TDD, systematic debugging and code review throughout. In the official Claude Code and Codex marketplaces. - [Superpowers](https://hebbmind.com/ko/skill/superpowers.md): [Skill] A full development methodology for coding agents: brainstorm a design, break it into an implementation plan, dispatch subagents to build and review each task, with mandatory TDD and systematic debugging. Installed as a plugin, it injects its bootstrap automatically. - [mattpocock/skills](https://hebbmind.com/ko/plugin/mattpocock-skills.md): [Plugin] Matt Pocock's engineering skills: /grill-me interrogates requirements to align on intent, then a spec-and-ticket flow, TDD, code review and domain modeling. Small, composable skills, listed in the official Claude Code plugin marketplace. - [Skills For Real Engineers (Matt Pocock)](https://hebbmind.com/ko/skill/mattpocock-skills.md): [Skill] Matt Pocock's engineering skills: grill-me interrogates you to align on requirements, to-spec turns discussion into a spec, to-tickets breaks it into tickets, plus tdd, diagnosing-bugs, code-review and more. Run setup-matt-pocock-skills once per repo first. - [Claude Code](https://hebbmind.com/ko/cli/claude-code.md): [CLI] Anthropic's terminal coding agent: understands your codebase, edits code, runs commands and handles git workflows, with plugins, MCP and a headless mode (claude -p). Sign in with a Claude account or set an API key. - [Code Review](https://hebbmind.com/ko/plugin/code-review.md): [Plugin] Reviews pull requests with several parallel subagents, scores each finding by confidence to filter out false positives, and can post the results as PR comments. Official Anthropic plugin; requires a logged-in GitHub CLI. - [GitHub CLI](https://hebbmind.com/ko/cli/gh.md): [CLI] GitHub's official CLI: manage pull requests, issues, releases and Actions workflows from the terminal. Most commands support --json output that agents can parse, and an official agent skill is available. Run gh auth login first. - [Claude Security](https://hebbmind.com/ko/plugin/claude-security.md): [Plugin] Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin. - [GitHub MCP Server](https://hebbmind.com/ko/mcp/github.md): [MCP] GitHub's official MCP server: lets agents read and write repositories and code, manage issues and pull requests, and check Actions workflows and code-scanning alerts. Use the hosted remote server or run it locally in Docker; needs a personal access token or OAuth. - [Trail of Bits Skills](https://hebbmind.com/ko/skill/trailofbits-skills.md): [Skill] Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace. - [Subagent-Driven Development](https://hebbmind.com/ko/skill/subagent-driven-development.md): [Skill] Follows an implementation plan by dispatching a fresh subagent for each task, reviewing each for spec compliance and code quality, then doing a final overall review. From Superpowers; use with its code-review and branch-finishing skills. - [Requesting Code Review](https://hebbmind.com/ko/skill/requesting-code-review.md): [Skill] Before finishing a task or merging, dispatches an independent reviewer subagent over a git commit range to check the work against the plan and requirements, then handles feedback by severity: critical, important, minor. Part of obra/superpowers. - [Ponytail](https://hebbmind.com/ko/skill/ponytail.md): [Skill] Has the agent follow a 'don't write it if you can avoid it' ladder: ask if it's needed, then reuse existing code, the standard library, platform features and installed dependencies, writing only the minimum while keeping validation, error handling, security and accessibility. - [Feature Dev](https://hebbmind.com/ko/plugin/feature-dev.md): [Plugin] A seven-phase feature development workflow: clarify requirements, explore the codebase with parallel subagents, design the architecture, implement, then run a quality review. Start it with /feature-dev. Official Anthropic plugin. - [PR Review Toolkit](https://hebbmind.com/ko/plugin/pr-review-toolkit.md): [Plugin] Six specialized review subagents that check comment accuracy, test coverage, silent failures, type design, code style and simplification opportunities. Run them individually or all at once. Official Anthropic plugin. - [gstack](https://hebbmind.com/ko/skill/gstack.md): [Skill] Skill pack from YC president Garry Tan: slash commands such as /office-hours, /plan-ceo-review, /review, /qa and /ship play CEO, engineering manager, designer, QA and release engineer. Needs Git and Bun; clone the repo and run ./setup as the README describes. - [Agent Skills (Addy Osmani)](https://hebbmind.com/ko/skill/addyosmani-agent-skills.md): [Skill] Engineering skill collection spanning define, plan, build, verify, review and ship, with /spec, /plan, /build, /test, /review and /ship commands, including TDD, code review and web performance audits. By Addy Osmani. - [Agent Skills](https://hebbmind.com/ko/plugin/agent-skills.md): [Plugin] Addy Osmani's production-grade engineering skill pack covering spec, planning, implementation, testing, review and shipping, with commands like /spec, /plan, /build, /test, /review and /ship. Supports both Claude Code and Codex. - [Code Review and Quality](https://hebbmind.com/ko/skill/code-review-and-quality.md): [Skill] Reviews code changes before merge across five axes: correctness, readability, architecture, security and performance. Works on code and PRs from you, other agents or other people, judged by whether they improve overall code health. Part of Addy Osmani's agent-skills. - [Open Code Review](https://hebbmind.com/ko/skill/open-code-review.md): [Skill] Drives Alibaba's open-source ocr CLI to review Git changes (working tree, a commit or a branch diff), grouping line-level comments by severity and fixing them on request. Needs an LLM endpoint (Anthropic, OpenAI and other protocols); installs the CLI if missing. By Alibaba. - [Open Code Review](https://hebbmind.com/ko/plugin/open-code-review.md): [Plugin] Alibaba's open-source AI code review tool: reads the Git diff, groups changed files for parallel review by subagents and returns line-level comments; the plugin adds review and delegated review commands. Install the ocr CLI and configure a model first; delegated mode needs no API key. - [Open Code Review](https://hebbmind.com/ko/cli/open-code-review.md): [CLI] Alibaba's open-source AI code review CLI (ocr): a deterministic pass filters and groups files and matches rules, then an agent reads the context and writes line-level comments; ocr scan reviews a whole directory. Needs an LLM endpoint, or delegate mode to hand off to your coding agent. - [Skills For Designers and Engineers](https://hebbmind.com/ko/skill/emilkowalski-skills.md): [Skill] Design engineering skills by Emil Kowalski, author of Sonner and Vaul: choose animation easing and durations, review and improve motion, apply Apple design principles, make web apps feel native on phones, and help pick UI libraries and prototype multiple versions. - [wshobson/agents](https://hebbmind.com/ko/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content. - [Agent Teams](https://hebbmind.com/ko/plugin/agent-teams.md): [Plugin] Orchestrates multi-agent teams using Claude Code's experimental Agent Teams feature: parallel multi-angle code review, competing-hypothesis debugging and feature work split by file ownership. Enable CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS first. - [Code Simplifier](https://hebbmind.com/ko/plugin/code-simplifier.md): [Plugin] Simplifies and tidies recently changed code without changing behavior: reduces nesting and redundancy, improves naming and follows the project conventions in CLAUDE.md. Official Anthropic plugin. - [Security Guidance](https://hebbmind.com/ko/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [GitHub](https://hebbmind.com/ko/plugin/github.md): [Plugin] Connects GitHub's official remote MCP server to manage issues and PRs, review code, search repos and call the GitHub API from Claude Code. Requires GITHUB_PERSONAL_ACCESS_TOKEN. - [GitLab](https://hebbmind.com/ko/plugin/gitlab.md): [Plugin] Connects GitLab's official remote MCP server (beta) so Claude can work with repos, merge requests, CI/CD pipelines, issues and wikis on GitLab.com. MCP access must be enabled on the top-level group, with browser OAuth. In Anthropic's official plugin marketplace. - [Codex plugin for Claude Code](https://hebbmind.com/ko/plugin/codex-plugin-cc.md): [Plugin] Calls Codex from Claude Code for read-only or adversarial code reviews, or delegates tasks to Codex to run in the background. Maintained by OpenAI; needs a ChatGPT account (the free tier works) or an API key. - [Web Design Guidelines](https://hebbmind.com/ko/skill/web-design-guidelines.md): [Skill] Reviews UI code against Vercel's Web Interface Guidelines, covering accessibility, focus, forms, animation, typography, dark mode and more, listing issues as file:line. Fetches the latest rules before each review. Maintained by Vercel. - [Engineering](https://hebbmind.com/ko/plugin/engineering.md): [Plugin] Everyday software engineering plugin: standup summaries, code review, structured debugging, architecture decision records, incident response and pre-deploy checks. Official from Anthropic, built mainly for Cowork but also usable in Claude Code. - [Compound Engineering](https://hebbmind.com/ko/plugin/compound-engineering-plugin.md): [Plugin] Every's compound engineering workflow: brainstorm, plan, execute, simplify and review, then capture what was learned as docs for future work. Includes 36 skills and supports Claude Code, Codex and a dozen other hosts. - [React Doctor](https://hebbmind.com/ko/skill/react-doctor.md): [Skill] Runs React Doctor via npx to scan React code for security, performance, correctness, accessibility and architecture issues with a 0-100 health score; checks changed code for regressions, and on /doctor fetches the official triage playbook to fix issues. - [Improve React](https://hebbmind.com/ko/skill/improve-react.md): [Skill] Audits a whole React codebase read-only: runs a React Doctor scan as evidence, vets findings across bugs, performance, accessibility, security and maintainability, ranks them by leverage, then writes self-contained plans other agents can execute. Never edits source. - [Localization Review](https://hebbmind.com/ko/skill/localization-review.md): [Skill] FormatJS's official localization review skill for software translators: read-only checks of UI strings and translations for ICU syntax, placeholders, terminology consistency and locale formats for dates, numbers and currency, listing issues with evidence and minimal fixes. Never edits files. - [Claude Skills (Fullstack Dev Skills)](https://hebbmind.com/ko/plugin/jeffallan-claude-skills.md): [Plugin] Bundles 60+ full-stack specialist skills into one plugin: experts for 12 languages including Python, TypeScript, Go, Rust and Java, and frameworks like React, Django and Spring Boot, activated automatically by request. Also includes Jira and Confluence workflow commands (needs Atlassian MCP). - [Thermo-Nuclear Code Quality Review](https://hebbmind.com/ko/skill/thermo-nuclear-code-quality-review.md): [Skill] Runs an extremely strict maintainability review of the current branch: hunts for restructurings that make the change dramatically simpler and flags files pushed past 1,000 lines, ad-hoc conditionals, thin wrappers and needless casts. From Cursor's official plugins; invoke manually. - [PAL MCP](https://hebbmind.com/ko/mcp/pal-mcp-server.md): [MCP] Lets Claude Code, Codex and other agents call Gemini, GPT, Ollama and other models to collaborate on code review, debugging, planning and multi-model consensus, and can bridge to other CLI agents. Configure at least one provider (API key or local Ollama). Formerly Zen MCP. - [Codex Security](https://hebbmind.com/ko/cli/codex-security.md): [CLI] OpenAI's official security CLI and TypeScript SDK: scans codebases to find, validate and fix security vulnerabilities, and can draft a SECURITY.md policy. Needs Node.js 22.13+, Python 3.10+, and a ChatGPT sign-in or API key. - [visual-explainer](https://hebbmind.com/ko/plugin/visual-explainer.md): [Plugin] Turns terminal output like architecture explanations, diff reviews and plan comparisons into styled HTML pages or slides with zoomable interactive Mermaid diagrams, replacing hard-to-read ASCII diagrams and tables. No build step; open directly in a browser. - [visual-explainer](https://hebbmind.com/ko/skill/visual-explainer.md): [Skill] Turns architecture explanations, diff reviews, plan reviews and data comparisons into self-contained HTML pages or slides with Mermaid diagrams and light and dark themes, replacing ASCII diagrams in the terminal. - [SQLFluff](https://hebbmind.com/ko/cli/sqlfluff.md): [CLI] Linter and formatter for 20+ SQL dialects that auto-fixes most issues and handles Jinja templating and dbt projects (dbt needs a plugin), suited to warehouse code review and CI. - [Plannotator](https://hebbmind.com/ko/plugin/plannotator.md): [Plugin] Annotate and review agent-generated plans, docs and code diffs in the browser, then send feedback back to the agent in one click. Hooks into plan mode and supports Claude Code, Codex and other agents. Run the official install script to set up the CLI first. - [improve](https://hebbmind.com/ko/plugin/improve.md): [Plugin] Uses a strong model to audit your codebase and list evidence-backed issues across correctness, security, performance and testing, writes a plan a cheaper model can execute, and reviews the results. It never edits code itself. By shadcn. - [Jakub Krehel Skills](https://hebbmind.com/ko/skill/jakubkrehel-skills.md): [Skill] Design engineer Jakub Krehel's 11 UI skills: targeted fixes for typography, color, layout, accessibility and UI copy, plus full interface reviews, animation teardowns, component state stress tests and multi-variant generation. Works on web project code; installing needs Node.js. - [Trail of Bits Skills](https://hebbmind.com/ko/plugin/trailofbits-skills.md): [Plugin] Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too. - [Differential Review](https://hebbmind.com/ko/skill/differential-review.md): [Skill] From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report. - [Defending Code Reference Harness](https://hebbmind.com/ko/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained. - [Codex Security](https://hebbmind.com/ko/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access. Next page: https://hebbmind.com/ko/tools.md?page=2&tag=code-review