diff --git a/README.md b/README.md index 18c38826..e5a82107 100644 --- a/README.md +++ b/README.md @@ -20,8 +20,9 @@ Your code is under new management. Agents that review your code - locally or on # Initialize warden in your repository npx @sentry/warden init -# Add the built-in baseline security check +# Add the built-in baseline reviews npx @sentry/warden add security-review +npx @sentry/warden add code-review # Run a pre-review on current branch changes # Uses Claude Code subscription if logged in, or set WARDEN_ANTHROPIC_API_KEY diff --git a/packages/docs/public/llms.txt b/packages/docs/public/llms.txt index b276c1d6..edd6723d 100644 --- a/packages/docs/public/llms.txt +++ b/packages/docs/public/llms.txt @@ -4,7 +4,7 @@ Warden watches over your code by running **skills** against your changes. Skills are prompts that define what to look for: security vulnerabilities, API design issues, performance problems, or anything else you want consistent coverage on. -Skills follow the [agentskills.io](https://agentskills.io) specification. They're markdown files with a prompt that tells the AI what to look for. Warden includes a baseline `security-review` skill by default. Treat it as a first pass, not a complete security audit, and add community or custom skills when you need deeper coverage. +Skills follow the [agentskills.io](https://agentskills.io) specification. They're markdown files with a prompt that tells the AI what to look for. Warden includes `security-review` for baseline AppSec coverage and `code-review` for correctness bugs. Treat them as first passes, and add more skills when you need deeper coverage. - Docs: https://warden.sentry.dev - GitHub: https://github.com/getsentry/warden @@ -51,6 +51,7 @@ Creates `warden.toml` (configuration) and `.github/workflows/warden.yml` (GitHub ```bash warden add security-review +warden add code-review ``` ### Run Locally @@ -116,6 +117,7 @@ Add a skill trigger to your configuration. ```bash warden add # Interactive mode warden add security-review # Add baseline security review +warden add code-review # Add correctness bug review warden add --list # List available skills warden add --remote your-org/warden-skills --skill api-review warden add --remote your-org/warden-skills@abc123 --skill api-review # Pinned to commit @@ -176,6 +178,13 @@ version = 1 [[skills]] name = "security-review" +[[skills.triggers]] +type = "pull_request" +actions = ["opened", "synchronize"] + +[[skills]] +name = "code-review" + [[skills.triggers]] type = "pull_request" actions = ["opened", "synchronize"] @@ -331,6 +340,9 @@ Skills can be referenced in multiple ways: [[skills]] name = "security-review" +[[skills]] +name = "code-review" + # By relative path [[skills]] name = "./custom-skills/my-review" @@ -351,7 +363,7 @@ Resolution order: 1. Remote repository (if `remote` field is specified) 2. Direct path (if skill contains `/`, `\`, or starts with `.`) 3. Conventional directories: `.warden/skills/`, `.agents/skills/`, `.claude/skills/` -4. Built-in skills, including `security-review` +4. Built-in skills, including `security-review` and `code-review` ### Environment Variables diff --git a/packages/docs/src/components/HeroFlow.astro b/packages/docs/src/components/HeroFlow.astro index 3e457087..3e74c1e3 100644 --- a/packages/docs/src/components/HeroFlow.astro +++ b/packages/docs/src/components/HeroFlow.astro @@ -1,6 +1,7 @@ --- const skills = [ "security-review", + "code-review", "api-design-review", "architecture-review", "dependency-review", @@ -18,6 +19,7 @@ const desktopSkillLayout = [ { side: "left", inset: "1.45rem" }, { side: "left", inset: "2.25rem" }, { side: "right", inset: "0.45rem" }, + { side: "left", inset: "0.95rem" }, ]; const connectorCount = skills.length + 2; --- diff --git a/packages/docs/src/pages/cli.astro b/packages/docs/src/pages/cli.astro index 51ba91ca..1936a3ba 100644 --- a/packages/docs/src/pages/cli.astro +++ b/packages/docs/src/pages/cli.astro @@ -74,6 +74,7 @@ warden init --force # Overwrite existing files`} Remote repository (if remote is specified in trigger config)
  • Direct path (if contains /, \, or starts with .)
  • Conventional directories: .warden/skills/, .agents/skills/, .claude/skills/
    • -
  • Built-in skills, including security-review
    • +
  • Built-in skills, including security-review and code-review

    • Environment Variables

    diff --git a/packages/docs/src/pages/config.astro b/packages/docs/src/pages/config.astro index f4a08c96..181555ae 100644 --- a/packages/docs/src/pages/config.astro +++ b/packages/docs/src/pages/config.astro @@ -36,6 +36,13 @@ const tocItems = [ [[skills]] name = "security-review" +[[skills.triggers]] +type = "pull_request" +actions = ["opened", "synchronize"] + +[[skills]] +name = "code-review" + [[skills.triggers]] type = "pull_request" actions = ["opened", "synchronize"]`} @@ -322,6 +329,9 @@ createFixPR = true`} [[skills]] name = "security-review" +[[skills]] +name = "code-review" + # By relative path [[skills]] name = "./custom-skills/my-review" @@ -346,7 +356,7 @@ remote = "your-org/warden-skills@abc123def"`}
  • Remote repository (if remote field is specified)
  • Direct path (if skill contains /, \, or starts with .)
  • Conventional directories: .warden/skills/, .agents/skills/, .claude/skills/
    • -
  • Built-in skills, including security-review
    • +
  • Built-in skills, including security-review and code-review

    • Skill Files

    diff --git a/packages/docs/src/pages/guide.astro b/packages/docs/src/pages/guide.astro index a9ddb68a..05e89e5c 100644 --- a/packages/docs/src/pages/guide.astro +++ b/packages/docs/src/pages/guide.astro @@ -40,7 +40,7 @@ const tocItems = [
  • Reports findings with severity, location, and optional fixes
    • -

    Skills follow the agentskills.io specification -they're markdown files with a prompt that tells the AI what to look for. Warden includes a baseline security-review skill by default. Treat it as a first pass, not a complete security audit, and add community or custom skills when you need deeper coverage.

    +

    Skills follow the agentskills.io specification -they're markdown files with a prompt that tells the AI what to look for. Warden includes security-review for baseline AppSec coverage and code-review for correctness bugs. Treat them as first passes, and add more skills when you need deeper coverage.

    Warden works in two contexts: