gsd-code-review

Review phase-scoped source changes and generate severity-classified REVIEW.md findings.

1|Updated May 24, 2026
One-click install
npx skills add https://github.com/tinner-deinno/innova-skills-lib --skill gsd-code-review-tinner-deinno
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gsd-code-review
Source: https://github.com/tinner-deinno/innova-skills-lib/tree/main/core/gsd/gsd-code-review
Command: npx skills add https://github.com/tinner-deinno/innova-skills-lib --skill gsd-code-review-tinner-deinno

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams catch bugs, security vulnerabilities, and code quality regressions by reviewing the source files changed during a specific phase of work.

Core Features & Use Cases

  • Phase-scoped code review: Review changes tied to a given phase, generating a structured report artifact in that phase directory.
  • Configurable review depth: Use quick, standard, or deep analysis to balance speed vs. thoroughness (pattern checks, per-file checks, or cross-file reasoning like call chains).
  • Actionable remediation support: Optionally apply fixes by spawning a fixer agent and (when enabled) automatically re-review up to a capped iteration count.

Quick Start

Run the command gsd-code-review for phase 2 with standard depth to generate phase-scoped REVIEW.md findings for the changes in that phase.

Frequently Asked Questions about gsd-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review for bugs and security vulnerabilities in changed files?

Automated code review for changed source files identifies bugs, security vulnerabilities, and code quality problems, then generates a severity-classified REVIEW.md artifact summarizing the findings. You can review changes tied to a specific work phase using configurable depth levels.

What's the best way to balance speed and thoroughness during static analysis?

Static analysis depth is configurable to balance speed versus thoroughness. You can select quick pattern matching, standard per-file checks, or deep cross-file analysis like call chain reasoning depending on the required risk-scoped assessment.

Can I automatically apply fixes and recheck code after security scanning?

Security scanning optionally coordinates an automated fix-and-recheck loop via a dedicated fixer workflow. When enabled, it applies fixes and automatically re-reviews the code up to a capped iteration count.

Does phase-based code review work without external dependencies?

Phase-based code review works without external dependencies. It reviews source files changed in a given phase internally, applying risk-scoped assessments to produce a structured report artifact directly in that phase directory.

Why use cross-file analysis instead of standard per-file checks for bug detection?

Cross-file analysis provides deeper bug detection by reasoning across call chains and file interactions, whereas standard per-file checks evaluate files independently. Deep analysis offers more thorough risk-scoped assessment for complex code changes.