review
Code review, security auditing, and exploratory testing with visual review artifacts

- REPOSITORY
- b-open-io/prompts
- PUBLISHED REF
- master
- IMMUTABLE SNAPSHOT
- 16ba2118aa9cd7802625399734584dddd96a3a6b
One source. Every runtime.
Complete-plugin installation is the recommended path. It preserves the runtime capabilities the publisher ships alongside its skills.
Codex
Grok Build
Optional — add the marketplace to browse and install other bOpen plugins.
Native plugin delivery
The Claude manifest delivers the plugin through Claude Code’s own marketplace and capability model.
Native plugin delivery
The Codex manifest exposes the same source through Codex-native skills, with optional custom-agent adapters where the plugin publishes an agent.
Portable knowledge
Skill folders remain usable by compatible hosts without mislabeling portable skills as a native plugin.
What the plugin includes
- SKILLS
- 6
- AGENTS
- 5
- HOOKS
- 0
- COMMANDS
- 0
- APPS
- 0
- MCP
- 0
Skills in review

code-audit-scripts
Run deterministic code security and quality scans — secret detection, debug artifact cleanup, and TODO/FIXME tracking. Use this skill before any security review, code audit, PR review, or when the user says 'scan for secrets', 'find debug logs', 'check for TODOs', 'audit this code', 'security scan', or 'clean up before shipping'. Also use proactively before deployments or when reviewing unfamiliar codebases. Runs all scans in parallel for speed.

free-roam-testing
Explore a running app on randomized unscripted paths to surface new bugs, broken flows, and confusing UX, then file deduplicated tickets. Use for "free roam", "explore the app", "monkey test", "exploratory testing", "find issues I don't know about", or "discovery loop". Respects a never-touch list and blast-radius boundary. Not for scripted regression tests.

hunter-skeptic-referee
This skill should be used when the user asks to 'find bugs', 'do a thorough code review', 'run a security audit', 'hunt for bugs', 'check for correctness issues', or 'review this code for edge cases'. Orchestrates a three-phase adversarial review using three isolated agents — Jerry (Hunter), Kayle (Skeptic), Jason (Referee) — to neutralize sycophancy and produce high-fidelity bug reports. User-facing command: /bug-hunt

visual-proposal
Produce one self-contained, theme-aware HTML page led by grounded diagrams for work that has not been built. Use for "make a visual proposal", "present these options visually", "diagram the trade-offs", "turn this plan into something reviewable", or a shareable design pitch, RFC, or options comparison. Use visual-review for completed code changes.

visual-review
Turn a PR, branch, commit, or working-tree diff into one self-contained HTML recap page with before/after wireframes, contract summaries, a file map, and annotated diffs. Use for "recap this PR", "visual recap", "review this diff visually", "show me what this branch changed", "critique this change", or before any large or UI-heavy review. Not for small single-file diffs.

wayfinder
Plan a huge chunk of work — more than one agent session can hold — as a shared map of decision tickets on your issue tracker, and resolve them one at a time until the way to the destination is clear.