New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
Get Started

review-pro

Package Overview
Dependencies
Maintainers
1
Versions
18
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

review-pro

Repository-aware AI code review for coding agents. Installer CLI: puts the review-pro core (triage → 13 specialist reviewers → synthesis) into Claude Code, opencode, Cursor, Codex, plus per-repo stack packs.

latest
Source
npmnpm
Version
1.4.0
Version published
Maintainers
1
Created
Source

review-pro

npm version CI license: MIT

review-pro is a tiered AI code-review system: triage → relevant specialist reviewers → synthesis. It reviews code written by AI agents, using AI agents — built to catch the failure modes AI-generated code actually ships with (hallucinated APIs, over-engineering, ignored conventions, needless dependencies).

This package is the installer CLI (npx review-pro). It installs the review-pro core (skills + subagents) into your agent tool, and the stack packs into your repo's .review-pro/.

🌐 Landing page: https://tufantunc.github.io/review-pro/ 📦 Source & full docs: https://github.com/tufantunc/review-pro

Install (one-time)

Installs the review-pro core — 13 specialist reviewer skills + subagents + the review-pro orchestrator — into your agent tool's home, from one canonical source.

npx review-pro init                           # opencode (default)
npx review-pro init --target claude-code      # or cursor | codex | all | auto

Supported targets: opencode · Claude Code · Cursor · Codex. Codex agents are auto-transformed to TOML; Cursor can also /add-plugin the repo directly.

No Node.js? review-pro is plain markdown skills and agents — you can copy them into your tool's folder and it works the same. See the manual install steps for each platform.

Add stack packs

Stack packs layer language/framework-specific signals onto the reviewers at review time. Install the ones you use into the repo you review:

npx review-pro                # interactive multi-select
npx review-pro add python     # or: node, go, rust, typescript-react, dotnet, php,
                              #     kotlin, swift, flutter, nextjs, react-native,
                              #     wordpress, ai-ml
npx review-pro list           # show catalog + installed versions
npx review-pro doctor         # check drift / roster integrity

Packs land in the reviewed repo's .review-pro/ and carry their own version.

Run a review

Restart your tool so the new skills/agents are discovered, then in the repo you want to review:

  • open a branch and ask the session to "review this branch with review-pro", or
  • invoke the review-pro skill directly.

A change's stated reason often points outside the repository: "fixed upstream in the new version". When it names something specific, the reviewer that owns the claim checks it against that artifact at the resolved dependency version, prefers the dependency source already on disk over the network, and records which channel settled it. An unsettled premise is reported as unsettled rather than trusted.

The agent runs the whole pipeline natively (git diff, reads changed files, Globs .review-pro/ for active stacks, dispatches the relevant reviewer subagents with their stack signals, has an independent verifier try to refute up to 8 Medium or higher code findings, and synthesizes one verdict: BLOCK / REQUEST CHANGES / APPROVE). No env vars, no scripts to run at review time.

Commands

CommandWhat it does
npx review-prointeractive — select stacks to install into .review-pro/
init [--target <platform>]install the core plugin into a tool's home
uninstall [--target <platform>]remove the core plugin from a tool's home
add <stack>install one stack pack (non-interactive, CI-safe)
remove <stack>remove an installed pack
update [stack]refresh installed packs to the catalog version
listshow catalog stacks + installed versions + drift
doctorvalidate installed packs (version drift, roster integrity, orphans)

Uninstall

Removes the review-pro core (the agents + skills init copied) from a tool's home. Mirrors init's --target logic.

npx review-pro uninstall --target opencode   # or claude-code | codex | all | auto

Add -y to skip the confirmation prompt (CI).

Stack packs (.review-pro/) live in your repo and are not touched — remove them with npx review-pro remove <stack> or rm -rf .review-pro. Cursor manages its own plugins: run /remove-plugin review-pro in Cursor.

Requirements & license

  • Node ≥ 18 (for this CLI only; manual install needs no Node).
  • MIT — see LICENSE.

13 specialist reviewers

security · correctness · craft · ai-antipatterns · dry · performance · backend · frontend · a11y · db · api-contract · tests · spec

The ai-antipatterns reviewer is first-class: hallucinated APIs/symbols/imports, invented config/env keys, needless dependencies, and ignored existing helpers — the failure modes that come from code being written by an agent rather than a person.

Keywords

ai-code-review

FAQs

Package last updated on 24 Sep 2026

Related posts