ck:code-review

Adversarial code review actively seeks to find security holes and potential failure modes in a GitHub pull request. This Skill executes a three-stage protocol focusing on spec compliance, code quality, and red-team analysis to ensure comprehensive security coverage.

Red-team analysis in code review is an adversarial approach that actively probes for security holes and potential failure modes. It operates on PRs, commits, pending changes, or entire codebases to ensure strict spec compliance and high code quality.

Yes, you need git and python installed to run spec compliance checks. The Skill integrates with git for commit diffs and python for executing its review scripts and references to analyze codebase changes accurately.

You can review an entire codebase for code quality, not just pull request diffs. The Skill operates on PRs via GitHub, commits via Git, pending changes, or the entire codebase to assess spec compliance and perform adversarial review.

The best way to automate security analysis for pending changes is using a three-stage review protocol. This Skill applies red-team analysis, spec compliance checks, and code quality assessment directly to your pending changes or commits.

Standard code reviews often fail to catch security holes because they lack adversarial review protocols. Implementing red-team analysis actively targets potential failure modes and enforces strict spec compliance across the codebase.