dune-app-review
Run a full Dune app platform review against a React/TypeScript CDF codebase, following the cognitedata/dune-app-reviews scoring criteria. Produces three artifacts: review-files.md (per-file inventory), review-packages.md (dependency audit), and review-report.md (scored report with must/should/nice-fix items). Use when the user asks for a Dune app review, pre-submit review, approval review, app certification review, code quality audit, CDF platform review, or "run dune-review" on a codebase before submission.
How do I install this agent skill?
npx skills add https://github.com/cognitedata/dune-skills --skill dune-app-reviewIs this agent skill safe to install?
- Gen Agent Trust Hubpass
This skill is safe. It performs a code review by fetching guidelines and commands from the author's official GitHub repository (cognitedata/dune-app-reviews). It uses these instructions to audit the local workspace and generate report artifacts. While it processes untrusted local code, this is inherent to its purpose as a review tool.
- Socketwarn
1 alert: gptSecurity
- Snykwarn
Risk: MEDIUM · 2 issues
- ZeroLeakspass
2 findings · Score: 80/100
What does this agent skill do?
Dune App Review
Fetch the official review command and follow it exactly:
gh api repos/cognitedata/dune-app-reviews/contents/.claude/commands/dune-review.md \
--jq '.content' | base64 -d
Adapt it for a local developer review:
- Treat the current workspace as the app under review.
- Skip all ticket, PR, overview, submodule, and
reviews/<TICKET-ID>/...setup steps. - If the upstream command asks for Jira ticket or PR input, ignore that requirement and continue with the local codebase.
- Use
reviews/dune-app-review/feedback-round-<N>/as the artifact directory for local reviews. - If no local feedback round exists yet, use
reviews/dune-app-review/feedback-round-1/. For reruns, increment the round number.
After the review artifacts are written, fetch the official verification command and follow it too:
gh api repos/cognitedata/dune-app-reviews/contents/.claude/commands/dune-review-verify.md \
--jq '.content' | base64 -d
Adapt verification the same way:
- Skip ticket and feedback-round lookup.
- Read the three artifacts from
reviews/dune-app-review/feedback-round-<N>/instead ofreviews/<TICKET-ID>/feedback-round-N/. - Verify the review against the local source code before declaring it complete.
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/cognitedata/dune-skills/dune-app-review">View dune-app-review on skillZs</a>