ut-review
Multi-pass code review using UltraThink code-review and security-scanner skills
Best use case
ut-review is best used when you need a repeatable AI agent workflow instead of a one-off prompt.
Multi-pass code review using UltraThink code-review and security-scanner skills
Teams using ut-review should expect a more consistent output, faster repeated execution, less prompt rewriting.
When to use this skill
- You want a reusable workflow that can be run more than once with consistent structure.
When not to use this skill
- You only need a quick one-off answer and do not need a reusable workflow.
- You cannot install or maintain the underlying files, dependencies, or repository context.
Installation
Claude Code / Cursor / Codex
Manual Installation
- Download SKILL.md from GitHub
- Place it in
.claude/skills/ut-review/SKILL.mdinside your project - Restart your AI agent — it will auto-discover the skill
How ut-review Compares
| Feature / Agent | ut-review | Standard Approach |
|---|---|---|
| Platform Support | Not specified | Limited / Varies |
| Context Awareness | High | Baseline |
| Installation Complexity | Unknown | N/A |
Frequently Asked Questions
What does this skill do?
Multi-pass code review using UltraThink code-review and security-scanner skills
Where can I find the source code?
You can find the source code on GitHub using the link provided at the top of the page.
Related Guides
AI Agents for Coding
Browse AI agent skills for coding, debugging, testing, refactoring, code review, and developer workflows across Claude, Cursor, and Codex.
Cursor vs Codex for AI Workflows
Compare Cursor and Codex for AI coding workflows, repository assistance, debugging, refactoring, and reusable developer skills.
SKILL.md Source
# UltraThink Code Review Run a multi-pass code review following the `code-review` and `security-scanner` skills. ## Load skills Read these skill files for patterns: - `~/.claude/skills/code-review/SKILL.md` - `~/.claude/skills/security-scanner/SKILL.md` ## Target Review `$ARGUMENTS`. If no argument provided, review all recently modified files: ```bash git diff --name-only HEAD~1 2>/dev/null || git diff --name-only --cached 2>/dev/null || echo "No git changes found" ``` ## Review Passes ### Pass 1: Logic & Correctness - Control flow errors - Off-by-one errors - Null/undefined handling - Race conditions - Error handling gaps ### Pass 2: Security - Injection vulnerabilities (SQL, XSS, command) - Authentication/authorization gaps - Sensitive data exposure - OWASP Top 10 checks ### Pass 3: Performance - N+1 queries - Unnecessary re-renders - Missing memoization - Large bundle imports - Unoptimized loops ### Pass 4: Style & Conventions - Naming consistency - File organization - TypeScript type safety - Dead code ## Output Format ``` Code Review Summary ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Files reviewed: X Issues found: X (Y critical, Z warnings) Critical: - [file:line] Description Warnings: - [file:line] Description Suggestions: - [file:line] Description Verdict: PASS / NEEDS CHANGES ```
Related Skills
ultrathink_review
Multi-pass code review powered by UltraThink's quality gate — checks correctness, security (OWASP), performance, readability, and project conventions in a single structured pass.
preview
Render, summarize, and present markdown documents and structured content in multiple output modes
code-review
Multi-pass code review covering logic correctness, security, performance, style, and maintainability
ultrathink
UltraThink Workflow OS — 4-layer skill mesh with persistent memory and privacy hooks for complex engineering tasks. Routes prompts through intent detection to activate the right domain skills automatically.
ultrathink_memory
Persistent memory system for UltraThink — search, save, and recall project context, decisions, and patterns across sessions using Postgres-backed fuzzy search with synonym expansion.
ui-design
Comprehensive UI design system: 230+ font pairings, 48 themes, 65 design systems, 23 design languages, 30 UX laws, 14 color systems, Swiss grid, Gestalt principles, Pencil.dev workflow. Inherits ui-ux-pro-max (99 UX rules) + impeccable-frontend-design (anti-AI-slop). Triggers on any design, UI, layout, typography, color, theme, or styling task.
Zod
> TypeScript-first schema validation with static type inference.
webinar-registration-page
Build a webinar or live event registration page as a self-contained HTML file with countdown timer, speaker bio, agenda, and registration form. Triggers on: "build a webinar registration page", "create a webinar sign-up page", "event registration landing page", "live training registration page", "workshop sign-up page", "create a webinar page", "build an event page", "free webinar landing page", "live demo registration page", "online event page", "create a registration page for my webinar", "build a training event page".
webhooks
Webhook design patterns — delivery, retry with exponential backoff, HMAC signature verification, payload validation, idempotency keys
web-workers
Offload heavy computation from the main thread using Web Workers, SharedWorkers, and Comlink — structured messaging, transferable objects, and off-main-thread architecture patterns
web-vitals
Core Web Vitals monitoring (LCP, FID, CLS, INP, TTFB), measurement with web-vitals library, reporting to analytics, and optimization strategies for Next.js
web-components
Native Web Components, custom elements API, Shadow DOM, HTML templates, slots, lifecycle callbacks, and framework-agnostic design patterns