aif-review

Reviews code changes for spec compliance and code quality against known failure patterns.

31|2|Updated Mar 21, 2026
One-click install
npx skills add https://github.com/letuhao/lore-weave --skill aif-review-letuhao
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aif-review
Source: https://github.com/letuhao/lore-weave/tree/main/.ai-factory/skill-context/aif-review
Command: npx skills add https://github.com/letuhao/lore-weave --skill aif-review-letuhao

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Code reviews often rubber-stamp changes without verifying that the implementation matches the spec or probing for real defects. This Skill enforces a two-stage review — spec compliance and code quality — and arms the reviewer with a checklist of failure modes this repository has actually been bitten by, such as checks that cannot fail, tenancy holes, and mock-only coverage across service boundaries. ## Core Features & Use Cases - Two-stage review gate: Verifies the code implements what was designed (no gaps, no scope creep), then audits patterns, security, accessibility, performance, and maintainability. - Repo-specific defect checklist: Targets historically real bugs — unfalsifiable checks, shared rows any authenticated user can mutate, direct provider SDK imports, per-user choices hidden behind global env flags, stored-but-never-read settings, and non-English text in persisted artifacts. - Structured findings and deferral discipline: Issues must be fixed and re-verified; deferrals require a tracked row plus a mechanism (asserted trigger, KNOWN_RED row, or named test), and results are emitted via the shared aif-gate-result contract. - Use Case: After implementing a multi-tenant feature, run this review to catch whether a new lint rule can actually fail, whether any shared row leaks across users, and whether cross-service behavior is covered by a live smoke test rather than mocks. ## Quick Start Review the current change set for spec compliance and code quality, then emit the findings as an aif-gate-result report.

Frequently Asked Questions about aif-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for spec compliance and code quality?

Run the two-stage review: first confirm the code implements exactly what was designed with no missing pieces or scope creep, then audit patterns, security, accessibility, performance, and maintainability. Any issue found must be fixed and re-verified before the review passes.

What is a check that cannot fail in code review?

It is a gate, lint, test, or assertion whose subject cannot vary, whose scope never reaches new files, that an adjacent decision defeats, or whose escape hatch cannot reach its reason. Demand red-then-green evidence proving the check actually fails when it should.

How do I detect tenancy holes in a multi-tenant application?

Ask who owns each shared row, what its scope key is, and whether one user's action can change another user's view. Any row mutable by any authenticated user without proper scoping is a tenancy hole that must be fixed.

When can a code review finding be deferred?

A finding may be deferred only if it clears the deferral gate in AGENTS.md and gets a tracked row plus a mechanism: an asserted trigger, a KNOWN_RED row, or a test named for it. Prose-only deferrals do not survive.

Why is mock-only test coverage insufficient across service boundaries?

When a change spans two or more services, unit tests with mocks cannot prove the services integrate correctly. The review requires a live smoke test as evidence that the cross-service behavior actually works.