Agent SkillsAgent Skills
bitwarden

reviewing-changes

@bitwarden/reviewing-changes
bitwarden
8,660
951 forks
Updated 4/6/2026
View on GitHub

Android-specific code review checklist and MVVM/Compose pattern validation for Bitwarden Android β€” use this for any review task, even if the user doesn't explicitly ask for a "checklist". Detects change type automatically and loads the right review strategy (feature additions, bug fixes, UI refinements, refactoring, dependency updates, infrastructure). Triggered by "review PR", "review changes", "review this code", "check this code", "Android review", code review requests on Kotlin/ViewModel/Composable/Repository/Gradle files, or any time someone asks to look at a diff, PR, or code changes in bitwarden/android.

Installation

$npx agent-skills-cli install @bitwarden/reviewing-changes
Claude Code
Cursor
Copilot
Codex
Antigravity

Details

Path.claude/skills/reviewing-changes/SKILL.md
Branchmain
Scoped Name@bitwarden/reviewing-changes

Usage

After installing, this skill will be available to your AI coding assistant.

Verify installation:

npx agent-skills-cli list

Skill Instructions


name: reviewing-changes description: Android-specific code review checklist and MVVM/Compose pattern validation for Bitwarden Android β€” use this for any review task, even if the user doesn't explicitly ask for a "checklist". Detects change type automatically and loads the right review strategy (feature additions, bug fixes, UI refinements, refactoring, dependency updates, infrastructure). Triggered by "review PR", "review changes", "review this code", "check this code", "Android review", code review requests on Kotlin/ViewModel/Composable/Repository/Gradle files, or any time someone asks to look at a diff, PR, or code changes in bitwarden/android.

Reviewing Changes - Android Additions

This skill provides Android-specific workflow additions that complement the base bitwarden-code-reviewer agent standards.

Instructions

IMPORTANT: Work systematically through each step before providing feedback. Each checklist file includes structured thinking guidance for its review passes.

Step 1: Retrieve Additional Details

Retrieve any additional information linked to the pull request using available tools (JIRA MCP, GitHub API).

If pull request title and message do not provide enough context, request additional details from the reviewer:

  • Link a JIRA ticket
  • Associate a GitHub issue
  • Link to another pull request
  • Add more detail to the PR title or body

Android metadata checks β€” flag as ❓ if any of these are missing:

  • PR includes *Screen.kt or Composable changes but has no screenshots
  • PR adds new ViewModel or Repository but has no test plan or test file changes

Step 2: Detect Change Type with Android Refinements

Use the base change type detection from the agent, with Android-specific refinements:

Android-specific patterns:

  • Feature Addition: New ViewModel, new Repository, new @Composable functions, new *Screen.kt files
  • UI Refinement: Changes only in *Screen.kt, *Composable.kt, ui/ package files
  • Infrastructure: Changes to .github/workflows/, gradle/, build.gradle.kts, libs.versions.toml
  • Dependency Update: Changes only to libs.versions.toml or build.gradle.kts with version bumps

Step 3: Load Appropriate Checklist

Based on detected type, read the relevant checklist file:

  • Dependency Update β†’ checklists/dependency-update.md (expedited review)
  • Bug Fix β†’ checklists/bug-fix.md (focused review)
  • Feature Addition β†’ checklists/feature-addition.md (comprehensive review)
  • UI Refinement β†’ checklists/ui-refinement.md (design-focused review)
  • Refactoring β†’ checklists/refactoring.md (pattern-focused review)
  • Infrastructure β†’ checklists/infrastructure.md (tooling-focused review)

The checklist provides:

  • Multi-pass review strategy
  • Type-specific focus areas
  • What to check and what to skip
  • Structured thinking guidance

Step 4: Execute Review Following Checklist

Follow the checklist's multi-pass strategy, thinking through each pass systematically.

Step 5: Consult Android Reference Materials As Needed

Load reference files only when needed for specific questions:

  • Re-reviews β†’ invoke reviewing-incremental-changes agent skill; scope to changed lines only, do not flag new issues in unchanged code
  • Issue prioritization β†’ reference/priority-framework.md (Critical vs Suggested vs Optional)
  • Phrasing feedback β†’ reference/review-psychology.md (questions vs commands, I-statements)
  • Architecture questions β†’ reference/architectural-patterns.md (MVVM, Hilt DI, module org, error handling)
  • Security questions (quick reference) β†’ reference/security-patterns.md (common patterns and anti-patterns)
  • Security questions (comprehensive) β†’ docs/ARCHITECTURE.md#security (full zero-knowledge architecture)
  • Testing questions β†’ reference/testing-patterns.md (unit tests, mocking, null safety)
  • UI questions β†’ reference/ui-patterns.md (Compose patterns, theming)
  • Style questions β†’ docs/STYLE_AND_BEST_PRACTICES.md

Core Principles

  • Priority order: Security β†’ Correctness β†’ Breaking Changes β†’ Performance β†’ Maintainability
  • Appropriate depth: Match review rigor to change complexity and risk
  • Specific references: Always use file:line_number format for precise location
  • Actionable feedback: Say what to do and why, not just what's wrong
  • Efficient reviews: Use multi-pass strategy, skip what's not relevant
  • Android patterns: Validate MVVM, Hilt DI, Compose conventions, Kotlin idioms

More by bitwarden

View all
angular-modernization
12,553

Modernizes Angular code such as components and directives to follow best practices using both automatic CLI migrations and Bitwarden-specific patterns. YOU must use this skill when someone requests modernizing Angular code. DO NOT invoke for general Angular discussions unrelated to modernization.

implementing-android-code
8,660

This skill should be used when implementing Android code in Bitwarden. Covers critical patterns, gotchas, and anti-patterns unique to this codebase. Triggered by "How do I implement a ViewModel?", "Create a new screen", "Add navigation", "Write a repository", "BaseViewModel pattern", "State-Action-Event", "type-safe navigation", "@Serializable route", "SavedStateHandle persistence", "process death recovery", "handleAction", "sendAction", "Hilt module", "Repository pattern", "implementing a screen", "adding a data source", "handling navigation", "encrypted storage", "security patterns", "Clock injection", "DataState", or any questions about implementing features, screens, ViewModels, data sources, or navigation in the Bitwarden Android app.

testing-android-code
8,660

This skill should be used when writing or reviewing tests for Android code in Bitwarden. Triggered by "BaseViewModelTest", "BitwardenComposeTest", "BaseServiceTest", "stateEventFlow", "bufferedMutableSharedFlow", "FakeDispatcherManager", "expectNoEvents", "assertCoroutineThrows", "createMockCipher", "createMockSend", "asSuccess", "Why is my Bitwarden test failing?", or testing questions about ViewModels, repositories, Compose screens, or data sources in Bitwarden.

reviewing-changes
555

Performs comprehensive code reviews for Bitwarden iOS projects, verifying architecture compliance, style guidelines, compilation safety, test coverage, and security requirements. Use when reviewing pull requests, checking commits, analyzing code changes, verifying Bitwarden coding standards, evaluating unidirectional data flow pattern, checking services container dependency injection usage, reviewing security implementations, or assessing test coverage. Automatically invoked by CI pipeline or manually for interactive code reviews.