Skip to content

PM-33385 - Craft a multi-agent code review #96

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
theMickster merged 23 commits into from
May 14, 2026
Merged

PM-33385 - Craft a multi-agent code review #96

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
23 commits
Select commit Hold shift + click to select a range
50067d7
Initial commit of the multi-agent review
theMickster Apr 24, 2026
91515eb
Update to use tech-lead. Expand mode capabilities. expand frontmatter
theMickster Apr 30, 2026
6761b2f
Merge remote-tracking branch 'origin/main' into multi-agent-review
theMickster May 1, 2026
1f49a67
Rename and bump version
theMickster May 1, 2026
a5488f0
Breakup large skill into reference files
theMickster May 1, 2026
0b3395a
Remove suggestion tier all together to follow Anthropic's patterns
theMickster May 2, 2026
9bd618c
Minor changes
theMickster May 2, 2026
90fc5c2
Remove pluginRoot metadata field.
theMickster May 4, 2026
e7434f0
Fix minor tech debt
theMickster May 4, 2026
0959cf2
Apply AskUserQuestion to allowed tools. Legit ask
theMickster May 4, 2026
bf13e54
Local sessions using skill came up with these minor adjustments
theMickster May 5, 2026
d3de779
Update CHANGELOG.md as suggested by Claude.
theMickster May 5, 2026
6dbae1b
Update de-indent
theMickster May 5, 2026
dca4251
Merge branch 'main' into multi-agent-review
theMickster May 7, 2026
e444128
Merge from main into feature branch
theMickster May 8, 2026
b16fb20
Merge from main and resolve conflicts
theMickster May 12, 2026
a5689a5
Implement pull request feedback
theMickster May 12, 2026
42f7ffe
Apply Claude Code suggestion
theMickster May 12, 2026
6ca4d00
Implement multi-agent review feedback on the multi-agent code review …
theMickster May 12, 2026
dafb873
Update plugins/bitwarden-code-review/skills/performing-multi-agent-co…
theMickster May 12, 2026
b03bd8d
Update plugins/bitwarden-code-review/skills/performing-multi-agent-co…
theMickster May 12, 2026
eb965d9
Merge branch 'main' into multi-agent-review
theMickster May 13, 2026
92882a6
Merge branch 'main' into multi-agent-review
withinfocus May 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 2 additions & 3 deletions .claude-plugin/marketplace.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,7 @@
},
"metadata": {
"description": "Official Bitwarden Claude Plugin Marketplace",
"version": "1.0.1",
"pluginRoot": "./plugins"
Copy link
Copy Markdown
Contributor Author

@theMickster theMickster May 4, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have been experimenting with cross agent configuration (namely Github Copilot) and I found that this configuration is incorrect. It should only be used it all plugins below did not have the ./plugins/ prefix in the source property. However, since all of them do, this should be removed.

"version": "1.1.0"
},
"plugins": [
{
Expand All @@ -25,7 +24,7 @@
{
"name": "bitwarden-code-review",
"source": "./plugins/bitwarden-code-review",
"version": "1.10.1",
"version": "1.11.0",
"description": "Comprehensive code review system with organization-wide standards."
},
{
Expand Down
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ A curated collection of plugins for AI-assisted development at Bitwarden. Enable
| ------------------------------------------------------------------- | ------- | ------------------------------------------------------------------------------------------------------------------- |
| [bitwarden-tech-lead](plugins/bitwarden-tech-lead/) | 2.1.0 | Tech lead for technical planning, architecture coherence, and surfacing patterns to Technical Strategy Ideas |
| [bitwarden-atlassian-tools](plugins/bitwarden-atlassian-tools/) | 2.2.3 | Read-only Atlassian access via MCP server with deep Jira issue research skill |
| [bitwarden-code-review](plugins/bitwarden-code-review/) | 1.10.1 | Autonomous code review agent following Bitwarden engineering standards with GitHub integration |
| [bitwarden-code-review](plugins/bitwarden-code-review/) | 1.11.0 | Autonomous code review agent following Bitwarden engineering standards with GitHub integration |
| [bitwarden-delivery-tools](plugins/bitwarden-delivery-tools/) | 1.1.0 | Delivery lifecycle skills: initiative funnel navigation, work transitions, commits, PRs, preflight checks, labeling |
| [bitwarden-devops-engineer](plugins/bitwarden-devops-engineer/) | 0.1.3 | DevOps engineering assistant: workflow compliance linting, action security auditing, and org-wide CI/CD remediation |
| [bitwarden-init](plugins/bitwarden-init/) | 1.1.0 | Initialize and enhance CLAUDE.md files with Bitwarden's standardized template format |
Expand Down
2 changes: 1 addition & 1 deletion package-lock.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion plugins/bitwarden-code-review/.claude-plugin/plugin.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "bitwarden-code-review",
"version": "1.10.1",
"version": "1.11.0",
"description": "Comprehensive code review system with organization-wide standards.",
"author": {
"name": "Bitwarden",
Expand Down
6 changes: 6 additions & 0 deletions plugins/bitwarden-code-review/CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,12 @@ All notable changes to the Bitwarden Code Review Plugin will be documented in th
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [1.11.0] - 2026-05-12

### Added

- New `performing-multi-agent-code-review` skill: orchestrates a multi-agent code review pipeline.

## [1.10.1] - 2026-05-12

### Changed
Expand Down
17 changes: 9 additions & 8 deletions plugins/bitwarden-code-review/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,14 +17,15 @@ This plugin provides an autonomous code review agent that conducts thorough, pro

## Skills

| Skill | Triggers | Purpose |
| ------------------------------------------------------------------------------------------ | ---------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
| [`classifying-review-findings`](./skills/classifying-review-findings/SKILL.md) | "classify finding", "severity" | 5-tier severity system (CRITICAL / IMPORTANT / DEBT / SUGGESTED / QUESTION) with emoji and label mapping |
| [`avoiding-false-positives`](./skills/avoiding-false-positives/SKILL.md) | "validate finding", "verify before posting" | Rejection criteria and verification checks that drop low-confidence findings before they reach a comment |
| [`posting-bitwarden-review-comments`](./skills/posting-bitwarden-review-comments/SKILL.md) | "post inline comment", "post PR comment" | Inline PR comment formatting per Bitwarden standards (severity emojis, explanation, actionable suggestion) |
| [`posting-review-summary`](./skills/posting-review-summary/SKILL.md) | "post summary", "summary comment" | Final summary comment handling — routes to sticky comment, GitHub Actions MCP tool, or local file based on context |
| [`reviewing-dependency-changes`](./skills/reviewing-dependency-changes/SKILL.md) | "package.json", "Renovate PR", "dependency manifest" | Flags dependency manifest changes for AppSec approval, version-bump significance, and lock-file hygiene |
| [`addressing-code-review-comments`](./skills/addressing-code-review-comments/SKILL.md) | "address review comments", "respond to PR feedback" | Guides developers working through review comments locally — verify before implementing, surface ambiguity, no performative agreement |
| Skill | Triggers | Purpose |
| -------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
| [`classifying-review-findings`](./skills/classifying-review-findings/SKILL.md) | "classify finding", "severity" | 5-tier severity system (CRITICAL / IMPORTANT / DEBT / SUGGESTED / QUESTION) with emoji and label mapping |
| [`avoiding-false-positives`](./skills/avoiding-false-positives/SKILL.md) | "validate finding", "verify before posting" | Rejection criteria and verification checks that drop low-confidence findings before they reach a comment |
| [`performing-multi-agent-code-review`](./skills/performing-multi-agent-code-review/SKILL.md) | "perform multi-agent code review", "review the last week of commits in this repo" | Perform a rigorous, multi-agent code review |
| [`posting-bitwarden-review-comments`](./skills/posting-bitwarden-review-comments/SKILL.md) | "post inline comment", "post PR comment" | Inline PR comment formatting per Bitwarden standards (severity emojis, explanation, actionable suggestion) |
| [`posting-review-summary`](./skills/posting-review-summary/SKILL.md) | "post summary", "summary comment" | Final summary comment handling — routes to sticky comment, GitHub Actions MCP tool, or local file based on context |
| [`reviewing-dependency-changes`](./skills/reviewing-dependency-changes/SKILL.md) | "package.json", "Renovate PR", "dependency manifest" | Flags dependency manifest changes for AppSec approval, version-bump significance, and lock-file hygiene |
| [`addressing-code-review-comments`](./skills/addressing-code-review-comments/SKILL.md) | "address review comments", "respond to PR feedback" | Guides developers working through review comments locally — verify before implementing, surface ambiguity, no performative agreement |

## Architecture

Expand Down
Loading
Loading