caveman-review
An agent skill by JuliusBrussee, from JuliusBrussee/caveman. Tags: cli, code-review, quality, review.
What it does
Compressed code review - one line per finding with location, problem and fix. Use for /caveman-review, "review this PR", or "review the diff".
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add JuliusBrussee/caveman --skill caveman-reviewOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/JuliusBrussee/caveman
cp -r caveman/skills/caveman-review ~/.claude/skills/caveman-reviewSafety box score
Grade A, minimal risk: 0 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This is a documentation-only skill that tells an agent how to format PR review comments. It does not ship executable code, touch the network or filesystem, or request credentials; the main risk is only stylistic guidance being too terse for some review contexts.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 0 (none) | No scripts or code execution are included; only Markdown instructions in `SKILL.md` and `README.md`. |
| Network access | 0 (none) | There are no download, upload, or remote-host calls in the shipped files. |
| Filesystem reach | 0 (none) | The skill does not read, write, or delete files; it only describes comment formatting. |
| Secrets & credentials | 0 (none) | No tokens, passwords, `.env` files, or credential stores are referenced. |
| Privilege & persistence | 0 (none) | No sudo, service install, shell config, or other privilege-changing behavior is present. |
| Instruction hijack surface | 0 (none) | The instructions are about review-comment style and do not tell the agent to ignore its rules, hide anything, or follow remote instructions. |
| Irreversible actions | 0 (none) | It does not send messages, push changes, deploy, pay, or otherwise act outside producing review text. |
| Transparency | 0 (none) | There are no binaries, encoded payloads, downloaded installers, or uninspectable files in the inventory. |
Rated 2026-10-16 by an automated review of 2 files from the skill's repository.
Source
- Repository
- JuliusBrussee/caveman (all skills from this repository)
- Path
- skills/caveman-review/SKILL.md
- Branch
- main
- Updated
- 2026-10-05
Related skills
- analyzing-release-readiness — Trigger a pre-merge release readiness review on a GitHub PR, GitLab MR, or local branch.
- interrogate — Use for "interrogate", "adversarial review", "multi-model review", "challenge this", "stress test this code", "find blind spots", or "tear this apart".
- make-pr-easy-to-review — Prepare PRs for review by cleaning noisy history, improving PR descriptions, and adding reviewer guidance without changing code behavior.
- no-comments — Spawn Comment Sicko, fix accepted findings, and offer encodings for claimed constraints.
- Poteto Mode — poteto's agent style for concise, detailed responses, deliberate subagents, unslopped prose, simple code, and verified work.
- pr-review-canvas — Generate an interactive PR review walkthrough as an HTML page.