receiving-code-review
Use when review findings arrive — verify each claim against the codebase and HOTL contracts before making changes. Governs how agents respond to review feedback.
- License 许可
- Apache-2.0
- 最近更新
- 2026-11-13
- Stars
- ★ 1.6k
- Forks
- 483
01 前言 Front Matter
- name
- receiving-code-review
- description
- Use when review findings arrive — verify each claim against the codebase and HOTL contracts before making changes. Governs how agents respond to review feedback.
03 SKILL.md 正文
HOTL Receiving Code Review
Core Rule
Treat review feedback as input to evaluate, not instructions to obey. Verify each claim against the current codebase, the workflow, and the HOTL contracts before making changes.
When This Applies
- After any code review — from the
hotl:code-revieweragent, PR review, human reviewer, or external contributor - Before implementing any suggested change
- Whenever review findings are returned to an executor at a review checkpoint
Process
1. Verify
Check whether each finding is factually correct in the current code:
- Confirm the file:line reference exists and matches the claim
- Run any verification commands that would confirm or refute the finding
- If the finding references a pattern or convention, check whether it actually applies to this codebase
- If the code changed since the review was written, re-evaluate the finding against current HEAD before doing anything
2. Evaluate
For each verified finding, check against HOTL contracts:
- Does acting on it violate the intent contract?
- Does it expand scope beyond success_criteria? (YAGNI)
- Does it conflict with existing constraints?
- Does it change risk_level or require a new gate?
- Does it contradict a prior human-approved decision?
Classify each finding:
- Accept — verified correct, within scope, improves the work
- Reject — factually wrong, out of scope, or conflicts with contracts
- Defer — valid but belongs in a separate workflow (scope expansion)
3. Respond
For each finding, produce a decision record:
| Field | Content |
|---|---|
| Finding | What was raised |
| Disposition | accept / reject / defer |
| Evidence | What was checked, what was found |
| Next action | What will be done, or why nothing will be done |
4. Implement
- Only implement accepted findings
- BLOCK findings first, then WARN, then NOTE
- If an accepted finding changes scope, constraints, or risk_level, stop implementation and return to planning/governance before proceeding
- Run verification after each change — do not batch blind
- If a change breaks verification, revert and re-evaluate
Handling Unclear Feedback
- Do not implement the unclear finding
- You may proceed with other findings that are independently verified and clearly in scope
- Ask for clarification on the unclear items before implementing them
Source-Specific Rules
HOTL code-reviewer agent: Findings include file:line refs and severity. Treat severity as the reviewer's initial priority signal, but still verify the impact before acting.
Human reviewer: Human reviewers are authoritative on product intent, priorities, and approved scope decisions. Technical claims still need verification against the code.
External reviewer: Verify everything. Check whether suggestions fit this codebase's patterns, constraints, and HOTL contracts. Push back with evidence when they don't.
Push-Back Protocol
When rejecting a finding:
- Use technical reasoning, not defensiveness
- Reference specific code, tests, or contract clauses
- If the finding conflicts with a human-approved gate decision, escalate to the human rather than overriding
04 同仓库更多 Skills
migrate-to-e2e
Moves an existing Playwright, Cypress, Selenium, Appium, Detox, Maestro, or TesterArmy suite to e2e one slice at a time, with the old suite running beside the new one until each ported test is proven. Keeps a MIGRATION.md progress file so any later session resumes where the last stopped. Optionally plants a defect to show both suites catch it. Use for /migrate-to-e2e, "migrate our tests to e2e", "port these Maestro flows", "move our TesterArmy tests", or when a project has an e2e config and an older suite still running.
e2e
Writes, runs, and debugs end-to-end tests for web and mobile apps with e2e, the agentic test runner, which mixes agent.act goals with exact locator assertions on a Playwright browser or an iOS or Android device. Also drives a project's running app live over the e2e MCP server to look at a screen, check a UI change, take a screenshot or record a video, and try a locator; and runs bug bashes, parallel e2e explore runs with each bug proven by a repro test. Use when a project depends on e2e or has an e2e.config.ts, when asked for end-to-end, browser, mobile, or agentic UI tests, to check a change in the running app, to QA or bug bash an app or branch, or when an e2e run fails.
create-verification-skill
Generate a project-local verify-<app> skill on top of e2e, so any coding agent can launch the app, check it is worth driving, exercise a feature the way a user does, keep evidence, and bug bash it. Writes the skill, a feature map with one explore charter per feature, and proves it once. Use for /create-verification-skill, "make a verification skill for this repo", or when a project has no scripted way to prove UI behavior.
deja-search
deja-vu memory — search the user's past AI coding sessions with the deja CLI. Holds what they already settled and never wrote into the repo (naming rules, banned or already-tried tools, required checks before merge, preferred values, who owns what). Use before your first edit in a task, before you call a change done or ready to merge, before you recommend a tool, library, design or reviewer, before re-debugging an error that may already be solved, when they say 'didn't we fix this before', 'what did we decide about X' or 'I already have that', and before telling them something on this machine does not exist.
deja-reflect
End-of-session reflection and memory curation with deja-vu. Review what was decided, what commands broke and what repaired them, and record durable project rules or decisions with deja remember so the next session starts with them.
revid
Make, edit, export and post AI videos with Revid (revid.ai) through the Revid MCP server. Use whenever the user wants a short-form or long-form video made (from an idea, a script, a URL, an article, a PDF, a tweet, a product page, their own clips, or a song), wants to find what is going viral on TikTok, YouTube, Instagram or X before making something, wants to edit or re-export an existing Revid project, generate a standalone AI image or clip, make a series episode, or publish and schedule a finished video to connected social accounts. Covers setup (hosted MCP with OAuth, or an API key), the 36 tools, credits, polling and the rules for publishing. Routes to the more specific revid-* skills when one fits.