
comet-review
Manually review the implementation diff for the current Comet change. Report correctness, security, and edge-case issues without advancing the workflow.
- Installs
- 123
- Last 24h
- —
- Trending rank
- —
- Security
- Not audited
Install
Works with every agent the skills CLI supports.
npx skills add https://github.com/rpamis/comet --skill comet-review- 01
Install
Run the command in your project. The CLI asks which agents to install for.
- 02
Describe the task
Ask your agent for something this skill covers. It loads comet-review automatically when relevant.
- 03
Review the result
The agent follows the SKILL.md steps, scripts and references bundled with the skill.
SKILL.md
The instructions your agent reads when the skill is triggered.
Comet Manual Code Review
Perform one on-demand, read-only code review of the currently selected Comet change. This entry is not a workflow phase and does not replace Build or Verify checks and reviews.
This entry is independent of review_mode. That field controls automatic reviews within the workflow; /comet-review is a single review explicitly requested by the user. Do not read, modify, or override the current change's review_mode during this invocation.
Perform read-only operations
The entire Skill invocation must remain read-only:
- Do not modify, create, or delete files.
- Do not stage, commit, switch branches, create branches, or create worktrees.
- Do not run
comet state select,comet native select,comet state set,comet state transition, phase guards,comet native next, or archive commands. - Do not fix findings, advance phase, or update tasks, state, verification reports, or review records.
- Do not call this review a Verify pass or treat “no findings” as proof that tests passed.
Only run commands needed to read files, query state, and inspect Git diffs. Checks that might execute project code, install dependencies, or produce files are outside this entry's scope.
1. Locate the project and current change
-
Use read-only Git queries to find the project root. Outside a Git repository, use the current Comet project root.
-
Run at the project root:
comet status . --json -
Read
.comet/current-change.jsonand choose the review target in this order:- If the file contains a valid
comet.selection.v2, use itsworkflowandchange. - If selection is absent and status lists exactly one unarchived Comet change, use that change for this review only; do not write selection.
- If selection is absent and several changes exist, list their names, workflows, and phases, ask the user to choose one, and end this invocation.
- If selection points to a missing, archived, or invalid change, report the stale/invalid selection and stop without repairing it.
- If the file contains a valid
Ignore ordinary OpenSpec changes that Comet does not manage. Do not replace the selected workflow with the default workflow merely because they differ.
2. Gather review context
Read only the context needed for this change. Keep a source path or command for each fact.
Classic
-
Read and follow
comet-classic/reference/classic-layout.mdto resolve the project's Classic logical roots. -
Read the current change's
proposal.md,design.md,tasks.md, andspecs/*/spec.md. Also read any linked Design Doc. -
Use these read-only queries for the phase, baseline, and existing evidence references:
comet state get <change-name> phase comet state get <change-name> base_ref comet state get <change-name> plan comet state get <change-name> verification_report -
Read the existing plan, verification report, and build/verify command checks returned by
comet status . --json. Mark missing evidence as “not provided”; do not infer failure or success.
Native
Run these read-only commands:
comet native show <change-name> --json
comet native status <change-name> --details --json
Follow the returned references to read the brief, complete proposed Specs, acceptance, Builder handoff, checks, verification, risks, blockers, and verification report. Use evidence for the current candidate/iteration only. Historical iterations may explain remaining risks but must not override current state.
3. Establish the implementation diff
- Run
git status --short --untracked-files=allto list all staged, unstaged, and untracked files in the worktree. - Use the current change's requirements, workspace binding, Git history, and worktree state to establish the most reliable relevant scope. For Classic, prefer a valid plan
base-ref; if it is absent or invalid, fall back to the statebase_ref. The two values do not need to match. Only when both values are invalid is the Classic baseline missing. For Native, use the workspace relationships in state and the evidence defining the current candidate's implementation scope. - Inspect the complete diff from the reliable baseline to the current worktree, including committed, staged, and unstaged changes. Read all untracked files belonging to this change, including source, tests, documentation, configuration, and metadata such as
SKILL.mdandagents/openai.yaml. Clearly identify them as untracked. - Exclude changes clearly belonging to other changes or unrelated user work. Ask the user only when ambiguity would materially affect the review conclusions. Otherwise, continue with the available evidence and state your scope assumptions in the report.
If the available evidence still cannot establish a reliable, verifiable baseline, review the visible worktree diff and prominently label the review scope as incomplete.
4. Perform the review
Review the requirements, tasks, and current diff, focusing only on:
- Implementation correctness and clear logic errors.
- Security, permission, and path-boundary risks.
- Error handling, compatibility, and important edge cases.
- Missing tasks or implementation that contradicts explicit requirements for this change.
- Whether tests cover the changed behavior and whether the available test evidence supports the conclusions.
Do not report style preferences, unrelated refactoring, or speculation without a concrete impact. Each finding must identify a file and line number and explain the input or situation that triggers the error or risk. Lower its severity or place it under “Open questions” when evidence is insufficient.
Use only these severity levels:
CRITICAL: security compromise, data loss, or an unusable core workflow.IMPORTANT: a clear correctness error, missing core acceptance requirement, or likely regression.WARNING: a real, non-blocking edge-case risk or test gap.SUGGESTION: a concrete improvement that does not affect current correctness.
5. Report the results
List findings first, ordered by severity. Use this format:
[IMPORTANT] Short title — path/to/file.ts:123
Impact: The input or situation and the resulting error.
Evidence: The specific relationship to the diff, task, spec, or verification record.
Then include:
Review scope: workflow, change, phase, baseline, included diffs, and any scope limitations.Evidence status: the test, build, and verification records inspected and whether they still apply to the current changes. Do not rerun tests.Open questions: only questions that actually prevent a judgment.Conclusion: the finding count, or an explicit “No concrete findings.”
Even with no findings, state remaining risks and checks not performed. End with this reminder:
This was a read-only manual review. It does not advance the Comet phase and cannot replace
/comet-verifyor Native Verify.
If the user subsequently requests fixes, treat that as a new write task: leave this Skill and resume development under the repository's current workflow rules.
FAQ
What does the comet-review skill do?
Manually review the implementation diff for the current Comet change. Report correctness, security, and edge-case issues without advancing the workflow.
How do I install comet-review?
Run npx skills add https://github.com/rpamis/comet --skill comet-review in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/comet-review/ (personal) or .claude/skills/comet-review/ (project).
Which AI agents can use comet-review?
Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.
Is comet-review safe to install?
No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.
Who maintains comet-review?
It is published by rpamis in rpamis/comet. It has 123 recorded installs.
More from rpamis/comet
comet
rpamis/comet
Comet workflow entry. Use when the user invokes /comet or asks to use Comet without choosing Native or Classic; load Native or Classic from project configuration.
comet-build
rpamis/comet
Plan, implement, and accept Classic tasks. Use when the user invokes /comet-build or Classic Runtime enters Build or returns to Build for repairs.
comet-archive
rpamis/comet
Archive and deliver a Classic change. Use when the user invokes /comet-archive or Classic Runtime enters Archive or resumes delivery.
comet-verify
rpamis/comet
Verify a Classic change and record the results. Use when the user invokes /comet-verify or Classic Runtime enters Verify.
comet-design
rpamis/comet
Complete the Classic technical design and obtain user confirmation. Use when the user invokes /comet-design or Classic Runtime enters Design.
comet-tweak
rpamis/comet
Use the Classic preset for a lightweight adjustment within one change. Use when the user explicitly invokes /comet-tweak, selects tweak, or resumes workflow: tweak.
Popular code quality & workflow skills
grill-me
mattpocock/skills
A relentless interview to sharpen a plan or design.
improve-codebase-architecture
mattpocock/skills
Scan a codebase for deepening opportunities, present them as a visual HTML report, then grill through whichever one you pick.
handoff
mattpocock/skills
Compact the current conversation into a handoff document for another agent to pick up.
domain-modeling
mattpocock/skills
Build and sharpen a project's domain model. Use when discussing codebase terminology, writing or editing a GLOSSARY.md, or recording or editing an ADR.
codebase-design
mattpocock/skills
Shared vocabulary for designing deep modules. Use when the user wants to design or improve a module's interface, find deepening opportunities, decide where a seam goes, make code more testable or AI-navigable, or when another skill needs the deep-module vocabulary.
diagnosing-bugs
mattpocock/skills
Diagnosis loop for hard bugs and performance regressions. Use when the user says "diagnose"/"debug this", or reports something broken/throwing/failing/slow.