What problem does it solve? Manual code review misses deep inter-procedural defects like tainted data flows, null dereferences, resource leaks, and race conditions that span function boundaries. This Skill runs a deterministic analyzer layer plus a three-pass LLM scan architecture to find real defects with concrete, copy-pasteable fixes. ## Core Features & Use Cases - Three-Pass Scan Architecture: Combines deterministic analyzers (C# build warnings, eslint, web.config checks), structured rule-based checkers, specialized persona reviews (reliability, concurrency, API contracts), and a free-flow adversarial pass for architectural risks. - Stack-Agnostic Detection: Detects .NET, TypeScript/Angular, Java/Spring, Python, Go, and VSTO codebases and loads only matching checker files, including per-project .NET Framework vs modern .NET lensing. - Ledger and Baseline Tracking: Writes findings to a persistent ledger with fingerprints, baselines, and capability-aware reconciliation so only new or touched findings gate commits. - Use Case: Run a full review before a release to get CID-numbered findings with event paths, vulnerable code snippets, corrected code, and CWE/OWASP references, plus an HTML report. ## Quick Start Ask the assistant to run a code review on the changed files in this repository and list all critical and high severity findings with fixes.
