This skill should be used when the user asks to 'find bugs', 'do a thorough code review', 'run a security audit', 'hunt for bugs', 'check for correctness issues', or 'review this code for edge cases'. Orchestrates a three-phase adversarial review using three isolated agents — Jerry (Hunter), Kayle (Skeptic), Jason (Referee) — to neutralize sycophancy and produce high-fidelity bug reports. User-facing command: /bug-hunt
Install the complete plugin to include its agents, hooks, commands, and runtime context.
Fastest path: hand this line to the coding agent doing the setup. It reads this page and installs the Review plugin, which ships this skill with everything it relies on.
Click anywhere on the prompt to copy.
Choose a runtime, then follow its setup steps. This installs the complete Review plugin.
COMPLETE PLUGIN
Example session using the verified commands above.
The portable SKILL.md on its own, without the plugin’s hooks, agents, commands, and companion skills. Use it only when you intentionally want the narrower path.
No required companion skills are declared.
System architecture and large-scale refactoring agent. Use this agent when the user asks to "refactor our microservices architecture", "map the dependencies across our codebase", "review this system design", or needs cross-file analysis spanning many services. Not for code-level security audits (use code-auditor) or single-module cleanup (use consolidator).
Code-level security auditor. Use this agent when the user asks to "audit this code for security issues", "review this PR for vulnerabilities", "check for injection risks", or "run a security review before merge", or asks whether a Vercel Security Dashboard finding reflects a code or configuration defect. Produces a severity-rated report with specific fixes using git diff review, Semgrep, CodeQL, and Trail of Bits patterns. Not for dashboard posture sweeps, runtime dependency/secrets scanning (use security-ops), or architecture tradeoffs (use architecture-reviewer).
Operational and runtime security agent. Use this agent when the user asks to "scan our dependencies for CVEs", "check for leaked secrets", "is this OWASP compliant", "audit our Vercel security posture", or "run a supply chain audit". Covers Vercel Security Dashboard triage, incident response, and SOC 2 technical control validation. Not for code-level audits (use code-auditor) or architectural review (use architecture-reviewer).
Test authorship and CI automation specialist. Use this agent when the user asks to "write tests", "add test coverage", "set up e2e/Playwright tests", "fix failing tests", or "add a CI coverage gate", or when a change needs tests before merging. Covers unit, integration, e2e, mocking, and coverage reporting. Not for performance profiling (use optimizer) or security review (use code-auditor).
Pass the canonical page to a teammate or keep it close for later.