Skip to content

PM-33385 - Craft a multi-agent code review #96

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
theMickster wants to merge 14 commits into
base: main
Choose a base branch
from
Open

PM-33385 - Craft a multi-agent code review #96

Show file tree
Hide file tree
Changes from 9 commits
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
50067d7
Initial commit of the multi-agent review
theMickster Apr 24, 2026
91515eb
Update to use tech-lead. Expand mode capabilities. expand frontmatter
theMickster Apr 30, 2026
6761b2f
Merge remote-tracking branch 'origin/main' into multi-agent-review
theMickster May 1, 2026
1f49a67
Rename and bump version
theMickster May 1, 2026
a5488f0
Breakup large skill into reference files
theMickster May 1, 2026
0b3395a
Remove suggestion tier all together to follow Anthropic's patterns
theMickster May 2, 2026
9bd618c
Minor changes
theMickster May 2, 2026
90fc5c2
Remove pluginRoot metadata field.
theMickster May 4, 2026
e7434f0
Fix minor tech debt
theMickster May 4, 2026
0959cf2
Apply AskUserQuestion to allowed tools. Legit ask
theMickster May 4, 2026
bf13e54
Local sessions using skill came up with these minor adjustments
theMickster May 5, 2026
d3de779
Update CHANGELOG.md as suggested by Claude.
theMickster May 5, 2026
6dbae1b
Update de-indent
theMickster May 5, 2026
dca4251
Merge branch 'main' into multi-agent-review
theMickster May 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 2 additions & 3 deletions .claude-plugin/marketplace.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,7 @@
},
"metadata": {
"description": "Official Bitwarden Claude Plugin Marketplace",
"version": "1.0.1",
"pluginRoot": "./plugins"
Copy link
Copy Markdown
Contributor Author

@theMickster theMickster May 4, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have been experimenting with cross agent configuration (namely Github Copilot) and I found that this configuration is incorrect. It should only be used it all plugins below did not have the ./plugins/ prefix in the source property. However, since all of them do, this should be removed.

"version": "1.1.0"
},
"plugins": [
{
Expand All @@ -25,7 +24,7 @@
{
"name": "bitwarden-code-review",
"source": "./plugins/bitwarden-code-review",
"version": "1.10.0",
"version": "1.11.0",
"description": "Comprehensive code review system with organization-wide standards."
},
{
Expand Down
4 changes: 2 additions & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,9 @@ A curated collection of plugins for AI-assisted development at Bitwarden. Enable

| Plugin | Version | Description |
| ------------------------------------------------------------------- | ------- | ------------------------------------------------------------------------------------------------------------------- |
| [bitwarden-tech-lead](plugins/bitwarden-tech-lead/) | 2.0.0 | Software architect for technical planning, architecture reviews, and implementation phasing |
| [bitwarden-tech-lead](plugins/bitwarden-tech-lead/) | 2.0.0 | Software architect for technical planning, architecture reviews, and implementation phasing |
| [bitwarden-atlassian-tools](plugins/bitwarden-atlassian-tools/) | 2.2.3 | Read-only Atlassian access via MCP server with deep Jira issue research skill |
| [bitwarden-code-review](plugins/bitwarden-code-review/) | 1.10.0 | Autonomous code review agent following Bitwarden engineering standards with GitHub integration |
| [bitwarden-code-review](plugins/bitwarden-code-review/) | 1.11.0 | Autonomous code review agent following Bitwarden engineering standards with GitHub integration |
| [bitwarden-delivery-tools](plugins/bitwarden-delivery-tools/) | 1.0.0 | Generic delivery workflow skills for committing, PR creation, preflight checks, and change labeling |
| [bitwarden-devops-engineer](plugins/bitwarden-devops-engineer/) | 0.1.1 | DevOps engineering assistant: workflow compliance linting, action security auditing, and org-wide CI/CD remediation |
| [bitwarden-init](plugins/bitwarden-init/) | 1.1.0 | Initialize and enhance CLAUDE.md files with Bitwarden's standardized template format |
Expand Down
2 changes: 1 addition & 1 deletion plugins/bitwarden-code-review/.claude-plugin/plugin.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "bitwarden-code-review",
"version": "1.10.0",
"version": "1.11.0",
"description": "Comprehensive code review system with organization-wide standards.",
"author": {
"name": "Bitwarden",
Expand Down
4 changes: 4 additions & 0 deletions plugins/bitwarden-code-review/CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,10 @@ All notable changes to the Bitwarden Code Review Plugin will be documented in th
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [1.11.0] - 2026-05-04

- New `performing-multi-agent-code-review` skill: orchestrates a multi-agent code review pipeline.
Comment thread
theMickster marked this conversation as resolved.

## [1.10.0] - 2026-04-28

### Added
Expand Down
17 changes: 9 additions & 8 deletions plugins/bitwarden-code-review/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,14 +17,15 @@ This plugin provides an autonomous code review agent that conducts thorough, pro

## Skills

| Skill | Triggers | Purpose |
| --------------------------------------------------------------------------------- | --------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------- |
| [`classifying-review-findings`](./skills/classifying-review-findings/SKILL.md) | "classify finding", "severity" | 5-tier severity system (CRITICAL / IMPORTANT / DEBT / SUGGESTED / QUESTION) with emoji and label mapping |
| [`avoiding-false-positives`](./skills/avoiding-false-positives/SKILL.md) | "validate finding", "verify before posting" | Rejection criteria and verification checks that drop low-confidence findings before they reach a comment |
| [`posting-bitwarden-review-comments`](./skills/posting-bitwarden-review-comments/SKILL.md) | "post inline comment", "post PR comment" | Inline PR comment formatting per Bitwarden standards (severity emojis, explanation, actionable suggestion) |
| [`posting-review-summary`](./skills/posting-review-summary/SKILL.md) | "post summary", "summary comment" | Final summary comment handling — routes to sticky comment, GitHub Actions MCP tool, or local file based on context |
| [`reviewing-dependency-changes`](./skills/reviewing-dependency-changes/SKILL.md) | "package.json", "Renovate PR", "dependency manifest" | Flags dependency manifest changes for AppSec approval, version-bump significance, and lock-file hygiene |
| [`addressing-code-review-comments`](./skills/addressing-code-review-comments/SKILL.md) | "address review comments", "respond to PR feedback" | Guides developers working through review comments locally — verify before implementing, surface ambiguity, no performative agreement |
| Skill | Triggers | Purpose |
| ------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
| [`classifying-review-findings`](./skills/classifying-review-findings/SKILL.md) | "classify finding", "severity" | 5-tier severity system (CRITICAL / IMPORTANT / DEBT / SUGGESTED / QUESTION) with emoji and label mapping |
| [`avoiding-false-positives`](./skills/avoiding-false-positives/SKILL.md) | "validate finding", "verify before posting" | Rejection criteria and verification checks that drop low-confidence findings before they reach a comment |
| [`performing-multi-agent-code-review`](./skills/performing-multi-agent-code-review) | "perform multi-agent code review", "review the last week of commits in this repo" | Perform a rigorous, multi-agent code review |
| [`posting-bitwarden-review-comments`](./skills/posting-bitwarden-review-comments/SKILL.md) | "post inline comment", "post PR comment" | Inline PR comment formatting per Bitwarden standards (severity emojis, explanation, actionable suggestion) |
| [`posting-review-summary`](./skills/posting-review-summary/SKILL.md) | "post summary", "summary comment" | Final summary comment handling — routes to sticky comment, GitHub Actions MCP tool, or local file based on context |
| [`reviewing-dependency-changes`](./skills/reviewing-dependency-changes/SKILL.md) | "package.json", "Renovate PR", "dependency manifest" | Flags dependency manifest changes for AppSec approval, version-bump significance, and lock-file hygiene |
| [`addressing-code-review-comments`](./skills/addressing-code-review-comments/SKILL.md) | "address review comments", "respond to PR feedback" | Guides developers working through review comments locally — verify before implementing, surface ambiguity, no performative agreement |

## Architecture

Expand Down
Loading
Loading