← Back to Skills Marketplace
anderskev

Review Go

by Kevin Anderson · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ✓ Security Clean
113
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install review-go
Description
Comprehensive Go backend code review with optional parallel agents
README (SKILL.md)

Go Backend Code Review

Arguments

  • --parallel: Spawn specialized subagents per technology area
  • Path: Target directory (default: current working directory)

Step 1: Identify Changed Files

git diff --name-only $(git merge-base HEAD main)..HEAD | grep -E '\.go$'

Pass condition: If this prints nothing, state No Go files in this diff in the summary and skip Steps 2–6; do not invent findings for out-of-scope files.

Step 2: Detect Technologies

# Detect BubbleTea TUI
grep -r "charmbracelet/bubbletea\|tea\.Model\|tea\.Cmd" --include="*.go" -l | head -3

# Detect Wish SSH
grep -r "charmbracelet/wish\|ssh\.Session\|wish\.Middleware" --include="*.go" -l | head -3

# Detect Prometheus
grep -r "prometheus/client_golang\|promauto\|prometheus\.Counter" --include="*.go" -l | head -3

# Detect ZeroLog
grep -r "rs/zerolog\|zerolog\.Logger" --include="*.go" -l | head -3

# Check for test files
git diff --name-only $(git merge-base HEAD main)..HEAD | grep -E '_test\.go$'

Step 3: Load Verification Protocol

Load beagle-go:review-verification-protocol skill and keep its checklist in mind throughout the review.

Step 4: Load Skills

Use the Skill tool to load each applicable skill (e.g., Skill(skill: "beagle-go:go-code-review")).

Always load:

  • beagle-go:go-code-review

Conditionally load based on detection:

Condition Skill
Test files changed beagle-go:go-testing-code-review
BubbleTea detected beagle-go:bubbletea-code-review
Wish SSH detected beagle-go:wish-ssh-code-review
Prometheus detected beagle-go:prometheus-go-code-review

Pass before Step 5: You have loaded beagle-go:go-code-review (and Step 3 verification protocol). Load a conditional skill only when its row applies: _test.go in Step 1 diff → testing skill; BubbleTea/Wish/Prometheus skill only if the matching Step 2 grep returned at least one path (if grep returned nothing, do not load that skill).

Step 5: Review

Sequential (default):

  1. Load applicable skills
  2. Review Go quality issues first (error handling, concurrency, interfaces)
  3. Review detected technology areas
  4. Consolidate findings

Parallel (--parallel flag):

  1. Detect all technologies upfront
  2. Spawn one subagent per technology area with Task tool
  3. Each agent loads its skill and reviews its domain
  4. Wait for all agents
  5. Consolidate findings

Step 6: Verify Findings

Before reporting any issue:

  1. Re-read the actual code (not just diff context)
  2. For "unused" claims - did you search all references?
  3. For "missing" claims - did you check framework/parent handling?
  4. For syntax issues - did you verify against current version docs?
  5. Remove any findings that are style preferences, not actual issues

Hard gates before listing any Critical or Major issue (Informational may be lighter):

  1. Read-depth: You opened the file on disk and read at least the enclosing function or block (diff-only or excerpt-only reading is not enough).
  2. Unused / dead code: You ran a reference search (rg/IDE) and noted the result in the finding (e.g. no references outside tests), or you are not claiming unused symbols.
  3. “Missing” behavior: You checked callers, framework wiring, or docs for the claimed gap, or you downgraded/dropped the item.

Step 7: Review Convergence

Single-Pass Completeness

You MUST report ALL issues across ALL categories (style, logic, types, tests, security, performance) in a single review pass. Do not hold back issues for later rounds.

Before submitting findings, ask yourself:

  • "If all my recommended fixes are applied, will I find NEW issues in the fixed code?"
  • "Am I requesting new code (tests, types, modules) that will itself need review?"

If yes to either: include those anticipated downstream issues NOW, in this review, so the author can address everything at once.

Scope Rules

  • Review ONLY the code in the diff and directly related existing code
  • Do NOT request new features, test infrastructure, or architectural changes that didn't exist before the diff
  • If test coverage is missing, flag it as ONE Minor issue ("Missing test coverage for X, Y, Z") — do NOT specify implementation details like mock libraries, behaviour extraction, or dependency injection patterns that would introduce substantial new code
  • Typespecs, documentation, and naming issues are Minor unless they affect public API contracts
  • Do NOT request adding new dependencies (e.g. Mox, testing libraries, linter plugins)

Fix Complexity Budget

Fixes to existing code should be flagged at their real severity regardless of size.

However, requests for net-new code that didn't exist before the diff must be classified as Informational:

  • Adding a new dependency (e.g. Mox, a linter plugin)
  • Creating entirely new modules, files, or test suites
  • Extracting new behaviours, protocols, or abstractions

These are improvement suggestions for the author to consider in future work, not review blockers.

Iteration Policy

If this is a re-review after fixes were applied:

  • ONLY verify that previously flagged issues were addressed correctly
  • Do NOT introduce new findings unrelated to the previous review's issues
  • Accept Minor/Nice-to-Have issues that weren't fixed — do not re-flag them
  • The goal of re-review is VERIFICATION, not discovery

Output Format

## Review Summary

[1-2 sentence overview of findings]

## Issues

### Critical (Blocking)

1. [FILE:LINE] ISSUE_TITLE
   - Issue: Description of what's wrong
   - Why: Why this matters (bug, race condition, resource leak, security)
   - Fix: Specific recommended fix

### Major (Should Fix)

2. [FILE:LINE] ISSUE_TITLE
   - Issue: ...
   - Why: ...
   - Fix: ...

### Minor (Nice to Have)

N. [FILE:LINE] ISSUE_TITLE
   - Issue: ...
   - Why: ...
   - Fix: ...

### Informational (For Awareness)

N. [FILE:LINE] SUGGESTION_TITLE
   - Suggestion: ...
   - Rationale: ...

## Good Patterns

- [FILE:LINE] Pattern description (preserve this)

## Verdict

Ready: Yes | No | With fixes 1-N (Critical/Major only; Minor items are acceptable)
Rationale: [1-2 sentences]

Post-Fix Verification

After fixes are applied, run:

go build ./...
go vet ./...
golangci-lint run
go test -v -race ./...

All checks must pass before approval.

Rules

  • Load skills BEFORE reviewing (not after)
  • Number every issue sequentially (1, 2, 3...)
  • Include FILE:LINE for each issue
  • Separate Issue/Why/Fix clearly
  • Categorize by actual severity
  • Check for race conditions with -race flag
  • Run verification after fixes
  • Report ALL issues in a single pass — do not hold back findings for later iterations
  • Re-reviews verify previous fixes ONLY — no new discovery
  • Requests for net-new code (new modules, dependencies, test suites) are Informational, not blocking
  • The Verdict ignores Minor and Informational items — only Critical and Major block approval
Usage Guidance
This skill appears to do what it says: run git diffs, search .go files, open files, and produce a consolidated review. Before installing: 1) Confirm the agent runtime provides git, grep/rg, head, and a file-read capability (SKILL.md assumes these but the skill declared none). 2) Review the external skills it loads (beagle-go:go-code-review and conditional beagle-go:* skills) — those will run with the agent's privileges and may request additional access. 3) Be aware it will read repository files (it must to satisfy its read-depth gates); do not run it against repositories containing secrets you can't expose. 4) If you plan to allow the --parallel mode, understand it will spawn subagents/tasks; ensure that's acceptable operationally. 5) If you require higher assurance, ask the publisher for a list and provenance of the beagle-go skills referenced, or run the skill in an isolated/test environment first.
Capability Analysis
Type: OpenClaw Skill Name: review-go Version: 1.0.1 The `review-go` skill bundle provides a comprehensive and structured workflow for Go backend code reviews. It utilizes standard development tools like `git`, `grep`, `go test`, and `golangci-lint` to identify changed files, detect specific frameworks (e.g., BubbleTea, Prometheus), and verify code quality. The instructions in `SKILL.md` emphasize rigorous verification, such as checking for race conditions and ensuring deep code analysis, and do not contain any indicators of malicious intent, data exfiltration, or prompt injection.
Capability Assessment
Purpose & Capability
The name/description (Go backend code review) matches the actions in SKILL.md: it runs git diffs, searches .go files, opens files, and consolidates findings. However, the SKILL.md expects CLI tools (git, grep/rg, head, etc.) and the ability to open files on disk, but the skill declares no required binaries; that mismatch should be resolved (the runtime must provide these tools). Loading specialized 'beagle-go:*' skills is coherent with delegating domain checks, but you should confirm those skills' provenance.
Instruction Scope
Instructions stay within code-review boundaries (identify changed files, search code, open files, verify findings). They explicitly require reading repository files, running searches (rg/grep), and opening enclosing code blocks — all appropriate for a review. Two points to note: (1) Step 3–4 instruct the agent to load external skills (beagle-go:...) which will expand what the agent does — verify those skills separately. (2) The Single-Pass / 'include anticipated downstream issues' rule is aggressive and may encourage broader analysis than strictly necessary; semantically this is still within a code-review scope but could lead to more intrusive searches.
Install Mechanism
This is instruction-only with no install spec or extracted code — lowest-risk delivery. Nothing is downloaded or written by the skill itself.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That is proportionate for a local code-review tool that operates on repository files. Be aware that loaded external skills may request their own credentials or environment access — those are not declared here.
Persistence & Privilege
The registry flags show always:false and disable-model-invocation:true; the skill does not demand forced presence or autonomous LLM invocation. It does instruct the agent to load other skills and (optionally) spawn parallel subagents via the Task tool — that expands runtime activity and blast radius, so confirm you trust the skills it will load and that spawning subagents is acceptable in your environment.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install review-go
  3. After installation, invoke the skill by name or use /review-go
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Add an explicit pass condition in Step 1: If no Go files are found, skip review steps and do not invent findings. - Clarify when to load conditional skills in Step 4: Only load a specialized skill if its detection check returns at least one file. - Strengthen requirements in Step 6: Introduce "hard gates" before listing Critical/Major issues, including full context reading and verifying unused/missing code claims. - Minor formatting and clarification improvements to instructions and sequencing.
v1.0.0
Initial release of review-go: a Go backend code review skill with technology-aware and parallel review logic. - Provides structured Go code review with a strict, multi-step protocol - Detects relevant tech areas (BubbleTea, Wish SSH, Prometheus) and loads targeted sub-skills - Offers optional parallel subagent review via the --parallel flag - Ensures issues are reported in a single, exhaustive pass (no holding back) - Delivers detailed, category-sorted findings with clear severity and remediation guidelines - Enforces strict review/convergence, scope, and iteration rules for consistency and quality
Metadata
Slug review-go
Version 1.0.1
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 2
Frequently Asked Questions

What is Review Go?

Comprehensive Go backend code review with optional parallel agents. It is an AI Agent Skill for Claude Code / OpenClaw, with 113 downloads so far.

How do I install Review Go?

Run "/install review-go" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Review Go free?

Yes, Review Go is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Review Go support?

Review Go is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Review Go?

It is built and maintained by Kevin Anderson (@anderskev); the current version is v1.0.1.

💬 Comments