From pith
Performs one-shot structured code reviews of PRs, diffs, files, or functions. Outputs one line per issue with severity (BUG, RISK, SEC, PERF, NIT, Q), description, and exact fix. No summaries.
npx claudepluginhub abhisekjha/pith --plugin pithThis skill uses the workspace's default tool permissions.
One line per issue. Exact format:
Performs structured code reviews for pull requests and merge requests, focusing on bugs, security vulnerabilities, correctness, and testing with actionable feedback.
Reviews code changes, PRs, and diffs for security vulnerabilities, performance issues, correctness bugs, and maintainability problems with tables for issues and suggestions.
Delivers one-line code review comments on git diffs in 'L<line>: severity problem. fix.' format (bug, risk, nit, q), sorted by severity. Outputs LGTM if clean. Use for review requests or /cavemanov-review.
Share bugs, ideas, or general feedback.
One line per issue. Exact format:
L<line>: <SEVERITY> <what is wrong>. Fix: <exact change>.
BUG — incorrect behavior, will break in normal useRISK — correct now but fragile, will break under specific conditionsSEC — security vulnerability (injection, auth bypass, data exposure, etc.)PERF — measurable performance problemNIT — style, naming, minor readability improvementQ — genuine question about intent, not a criticismNo issues found.auth.ts L42: BUG ...L42: BUG token.exp compared in wrong unit (seconds vs ms). Fix: token.exp * 1000 < Date.now()
L87: SEC /auth endpoint has no rate limiting — brute-force viable. Fix: add express-rate-limit, max 10/min per IP
L103: RISK db.query() not wrapped in try/catch — uncaught rejection crashes server. Fix: wrap, return 500
L118: NIT variable named `data` — too generic. Fix: rename to `userProfile`
L201: Q Why is this cached for 24h? Stale user data seems risky here.
Start each line with the line number only: L42: BUG ...
Prefix with filename: routes/auth.ts L42: BUG ...
One-shot. Does not persist.