Code Review Plugin

Why it matters

Section 4.1 is about deciding which defects deserve a finding. This plugin is a working answer written as a prompt, so you can read its reporting rules and watch what they let through.

What to practise

Run /code-review on a pull request, first to the terminal and then with --comment. Read commands/code-review.md beside the README: it skips closed, draft and already-reviewed pull requests, launches two agents for CLAUDE.md compliance and two for bugs in the diff, sends each flagged bug to a separate validation subagent, and drops what it can’t confirm. Note its “Do NOT flag” list, and that the README still describes a 0–100 confidence score filtered at 80.

How it fits

The “Do NOT flag” list is the categorical rule of 4.1.1; set the README’s threshold against the command’s validation step for 4.1.2. For 4.1.4, revise one agent’s task and rerun on the same pull request. For 4.6, the review runs in fresh agent contexts (4.6.1), splits compliance from bug hunting (4.6.2), and re-checks each bug before reporting it (4.6.3).