Tools

Reviews pull requests with several parallel subagents, scores each finding by confidence to filter out false positives, and can post the results as PR comments. Official Anthropic plugin; requires a logged-in GitHub CLI.

Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace.

Six specialized review subagents that check comment accuracy, test coverage, silent failures, type design, code style and simplification opportunities. Run them individually or all at once. Official Anthropic plugin.

Skill pack from YC president Garry Tan: slash commands such as /office-hours, /plan-ceo-review, /review, /qa and /ship play CEO, engineering manager, designer, QA and release engineer. Needs Git and Bun; clone the repo and run ./setup as the README describes.

Addy Osmani's production-grade engineering skill pack covering spec, planning, implementation, testing, review and shipping, with commands like /spec, /plan, /build, /test, /review and /ship. Supports both Claude Code and Codex.

Engineering skill collection spanning define, plan, build, verify, review and ship, with /spec, /plan, /build, /test, /review and /ship commands, including TDD, code review and web performance audits. By Addy Osmani.

Drives Alibaba's open-source ocr CLI to review Git changes (working tree, a commit or a branch diff), grouping line-level comments by severity and fixing them on request. Needs an LLM endpoint (Anthropic, OpenAI and other protocols); installs the CLI if missing. By Alibaba.

Design engineering skills by Emil Kowalski, author of Sonner and Vaul: choose animation easing and durations, review and improve motion, apply Apple design principles, make web apps feel native on phones, and help pick UI libraries and prototype multiple versions.

Orchestrates multi-agent teams using Claude Code's experimental Agent Teams feature: parallel multi-angle code review, competing-hypothesis debugging and feature work split by file ownership. Enable CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS first.

Reviews UI code against Vercel's Web Interface Guidelines, covering accessibility, focus, forms, animation, typography, dark mode and more, listing issues as file:line. Fetches the latest rules before each review. Maintained by Vercel.

FormatJS's official localization review skill for software translators: read-only checks of UI strings and translations for ICU syntax, placeholders, terminology consistency and locale formats for dates, numbers and currency, listing issues with evidence and minimal fixes. Never edits files.

Design engineer Jakub Krehel's 11 UI skills: targeted fixes for typography, color, layout, accessibility and UI copy, plus full interface reviews, animation teardowns, component state stress tests and multi-variant generation. Works on web project code; installing needs Node.js.

Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too.

Polishes existing motion against the transitions.dev token scale for duration, distance, scale, blur and easing, matching each value by what the motion does rather than the nearest number, with rules for open/close asymmetry, hover in and out, stagger and intent delays.

Design engineer Jakub Krehel's UI polish skill covering animation, typography, icons, hover states, optical alignment, concentric radii, shadows and hit areas, with quick and full review modes, so agents get the details right when building or reviewing UI. Works on web code; needs Node.js.

Companion skill to the User Interface Wiki: 152 rules in 12 categories, from motion, easing and exit animations to UI sounds, interaction laws, prefetching and typography, for writing or reviewing web UI code, with issues listed by file:line. Needs an existing web project and Node.js to install.

Official SonarSource server: connects to SonarQube Server or Cloud so agents can query code issues, quality gates, security hotspots and dependency risks, and analyze file contents directly. Needs a SonarQube token; Docker is the recommended way to run it.

Miro's official plugin with the Miro remote MCP and three skills: draw codebase explanations on a board, run visual code reviews on the board, and turn board docs, diagrams and prototypes into development specs. Needs OAuth with a Miro account.

Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.

Diffs a live page's accessibility violations against a baseline, stashing uncommitted changes by default or comparing with a branch, and reports new, fixed and pre-existing WCAG issues with selectors and fixes. Locates only, no edits. Runs AccessLint's Chrome and CLI tools via npx.

Audits animation code against Disney's 12 principles adapted for the web, checking timing, easing, physics and staging rules such as user-initiated motion under 300ms and ease-out entrances, and reports findings as file:line.

Audits Web Audio API code for procedural UI sound synthesis: reusing one AudioContext, resuming when suspended, disconnecting nodes, exponential decay envelopes, noise for clicks and parameter choices, with findings reported as file:line.

Audits UI code for audio feedback: every sound needs a visual equivalent, an off switch and volume control, and should respect reduced motion. Sound is for confirmations and errors, not typing or decorative hovers. Also checks preloading, default volume and sound weight. Reports file:line findings.

Audits animation code for the right timing function: springs for gestures and interruptible motion, easing for system-driven state changes, linear for progress, and no animation for high-frequency interactions. Also checks spring parameters and durations. Reports file:line findings.