The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes git and gh (GitHub CLI) commands to fetch repository data and diffs. This is the primary intended function of the code review tool and is performed in a read-only manner relative to the remote repository.
[REMOTE_CODE_EXECUTION]: The skill uses a subagent (bitwarden-code-reviewer) to perform the analysis. This delegation follows platform standards, and the subagent is restricted to the specific bitwarden-code-review namespace.
[PROMPT_INJECTION]: The skill contains strict input validation rules for the --base ref and PR # target using regex (^[A-Za-z0-9][A-Za-z0-9._/-]*$ and ^[0-9]+$). These checks are explicitly designed to prevent command injection or flag manipulation in the underlying shell commands (e.g., preventing a ref from starting with - which would be interpreted as a git flag).

code-review-local