New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Get Started

dsh-command-code-review

Package Overview
Dependencies
Maintainers
1
Versions
14
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

dsh-command-code-review

/code-review slash command for DeepSeek Harness — multi-agent review of pull requests and local code, with configurable confidence scoring

Source
npmnpm
Version
0.1.7
Version published
Weekly downloads
0
Maintainers
1
Weekly downloads
 
Created
Source

dsh-command-code-review

/code-review slash command for DeepSeek Harness — five parallel review lenses, per-finding confidence scoring, for both pull requests and local code.

/code-review slash command for DeepSeek Harness (dsh) — a self-contained plugin bundle that runs a full code review, either on a pull request or on local code.

English | 中文

What it does

Registers one global slash command with two modes:

  • /code-review <pr number|url> — pull-request review (eligibility check → 5 parallel review lenses → per-finding confidence scoring → posts the result back to the PR with gh).
  • /code-review [request] (or empty) — local review of the requested scope (with no input it first probes the current branch for an open pull request and reviews that if one exists, otherwise the current uncommitted changes); reports findings directly in chat (no gh needed).

Both modes share the same core: collect relevant dsh.md guidance, launch 5 parallel review subagents (dsh.md adherence, shallow bug scan, git-history, prior-change comments, code-comment compliance), confidence-score each finding with a parallel subagent, and drop anything below the configured threshold (default 80).

Requirements

  • A dsh profile built on @deepseek-ai/dsh-base (every shipped profile), which provides the commands service and the subagent/bash/todo tools the workflow uses.
  • The GitHub CLI (gh) on PATH, authenticated — required only for pull-request review. Local review needs no gh.

Install

From the npm registry:

dsh plugin --profile web add dsh-command-code-review

From a local checkout or tarball:

# directory
dsh plugin --profile web add /path/to/dsh-command-code-review

# packed tarball
dsh plugin --profile web add /path/to/dsh-command-code-review-<version>.tgz

The dsh plugin add command installs the package into the profile and, because its package.json declares dsh.bundle, appends it to dsh.profile.bundles automatically. Restart or re-boot the profile to pick it up.

Usage

Type /code-review in the web composer:

/code-review 123                                  # review a pull request by number
/code-review https://github.com/owner/repo/pull/123
/code-review review src/auth                      # local review of a named scope
/code-review                                      # local review of the current uncommitted changes

How it works

The package is a standard dsh bundle:

  • package.json declares "dsh": { "bundle": { "patch": "./cordis.patch.yml" } }.
  • cordis.patch.yml inserts one plugin row (id: command-code-review) into the profile layer stack.
  • lib/index.js is a Cordis plugin that injects commands and registers the code-review command. The handler routes PR numbers/URLs to the pull-request workflow and everything else (including empty input) to the local-review workflow, then delivers it via agent.followup. The confidence threshold is configurable per profile (see Configuration), and the workflows tell the agent to await subagent completion notices rather than polling.

Users can disable or override the command from their own profile cordis.patch.yml:

- disable: command-code-review

Configuration

  • Confidence threshold: the workflow drops findings scored below a threshold (default 80). Override it in your profile cordis.patch.yml:

    - id: command-code-review
      config:
        threshold: 90
    
  • Review lenses: the 5 parallel review lenses (dsh.md compliance, bug scan, git-history, prior-change comments, code-comment compliance) live in lib/index.js; add or remove lenses to fit your needs.

Troubleshooting

  • No review comment posted: the PR is closed, draft, trivial, or already reviewed; or no finding scored 80 or above.
  • gh not found: install and authenticate the GitHub CLI (gh auth login); only pull-request review needs it.
  • Code links do not render: use the full commit SHA and the #L[start]-L[end] line range.

License

MIT

Keywords

deepseek

FAQs

Package last updated on 26 Aug 2026

Related posts