skills.rest
tayiorbeii
tayiorbeiiCOMMUNITY
Explore all skills by this author →
GitHub

gstack-review

Reviews pull request diffs for SQL safety, LLM trust boundaries, and structural issues.

Updated Jun 24, 2026
Search Tags:#diff analysis#code review#pull request#merge#gstack#sql safety#pre-landing
One-click install
npx skills add https://github.com/tayiorbeii/paperclip-factory-kit-hermes --skill gstack-review-tayiorbeii
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gstack-review
Source: https://github.com/tayiorbeii/paperclip-factory-kit-hermes/tree/main/skills/paperclip/gstack-review
Command: npx skills add https://github.com/tayiorbeii/paperclip-factory-kit-hermes --skill gstack-review-tayiorbeii

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Catching structural defects before code lands is hard under time pressure. This Skill performs a pre-landing review of a pull request diff against its base branch, surfacing SQL safety risks, LLM trust boundary violations, conditional side effects, and other structural problems before merge. ## Core Features & Use Cases - Pre-landing diff analysis: Analyzes the diff against the base branch to find SQL injection risks, unsafe LLM trust boundaries, and conditional side effects. - Structured decision workflow: Uses AskUserQuestion decision briefs with recommendations, completeness scores, and pros/cons to drive review outcomes. - Proactive review triggers: Activates on requests like "review this PR", "code review", "check my diff", or when the user is about to merge or land changes. - Use Case: Before merging a feature branch, ask for a pre-landing review to catch a missing parameterization in a SQL query and an unguarded side effect in a conditional branch. ## Quick Start Ask the assistant to review this PR diff against the base branch before merging.

Frequently Asked Questions about gstack-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a pull request diff before merging?▼

Invoke the review workflow with a request like "review this PR" or "check my diff". The Skill analyzes the diff against the base branch and reports SQL safety issues, trust boundary violations, and structural problems before you land the change.

What kinds of issues does a pre-landing code review catch?▼

It targets structural issues in the diff: SQL safety problems such as injection risks, LLM trust boundary violations where untrusted input crosses into privileged contexts, and conditional side effects that only fire on certain branches.

Can this review run automatically before I merge code?▼

Yes. The Skill is designed to be proactively suggested when you are about to merge or land code changes, and it also triggers on phrases like "code review" or "pre-landing review".

Does the review skill work in plan mode?▼

Yes. When invoked in plan mode, the skill file is treated as executable instructions and takes precedence over generic plan mode behavior, with AskUserQuestion satisfying plan mode's end-of-turn requirement.

What happens if AskUserQuestion is unavailable during the review?▼

The workflow stops and reports "BLOCKED — AskUserQuestion unavailable". It does not silently auto-decide or write decisions to the plan file as a substitute.

Related Skills

Explore More Software Engineering Skills→
shopwareLabsshopwareLabs
41

feature-branch-pr-writing

Draft conventional-commit PR titles and descriptions for feature-branch pull requests.

Official
Advanced
tjmgregorytjmgregory

squash-merge

Squash merge GitHub pull requests via gh CLI with conventional commit messages.

Community
Advanced
PortmeoPortmeo

sdd-verify

Validate code implementations against specifications by running tests and builds.

Community
Advanced
ckrono-progckrono-prog

security_scan

Conducts a multi-scanner security audit of a codebase for critical and high vulnerabilities.

Community
Intermediate