Download for MacApple silicon, macOS 14+
Skill

forge-app-review

@atlassian Updated 2026-10-20

Performs a lightweight pre-release readiness review of Atlassian Forge apps across manifest/module wiring, architecture, runtime compatibility, dependency posture, tests, deploy readiness, and obvious security, cost, or reliability smells. Use when the user asks "review my Forge app", "pre-deploy check", "is this app ready to ship", "review manifest", "general app review", "release readiness", or asks for a broad quality pass. Do not use for deep security audits/SAST/exploitability review, cost optimization, or diagnosing a known broken app; route those to forge-security-review, forge-cost-optimizer, or forge-debugger respectively.

agent-skillsai-agentsclaude-code-pluginclaude-code-skillsgemini-cli-extensionmcp

Install

With your agent

Install OMGSkills skill "atlassian/forge-skills:skills/forge-app-review" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.

Manual command

git clone https://github.com/atlassian/forge-skills /tmp/forge-skills && ln -s /tmp/forge-skills/skills/forge-app-review ~/.claude/skills/forge-app-review

From README

Forge App Review Run a general Forge release-readiness review. This skill is the front door for broad app review, not a replacement for specialist security, cost, or debugging skills. Boundaries Use this skill for: Pre-deploy and release-readiness checks. General architecture and maintainability review. Manifest/module/resource/function wiring. Runtime, dependency, package, and script sanity checks. Basic tests/deploy readiness and operational hygiene. Obvious security, cost, or reliability smells that should trigger a deeper specialist pass. Use another skill instead when the user's primary intent is: Deep security audit, SAST, authz, secrets, tenant isolation, exploitability, or CVSS reporting -> forge-security-review. Cost optimization, invocations, GB-seconds, storage/log volume, trigger frequency, or memory tuning -> forge-cost-optimizer. A known failure, error message, blank UI, failed deploy/ , broken resolver, missing app, or logs/tunnel diagnosis -> forge-debugger.