requesting-code-review

Scan git code changes for security vulnerabilities and test regressions before commit.

1|Updated Apr 24, 2026
One-click install
npx skills add https://github.com/automatedigital/spark --skill requesting-code-review-automatedigital
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: requesting-code-review
Source: https://github.com/automatedigital/spark/tree/main/skills/software-development/requesting-code-review
Command: npx skills add https://github.com/automatedigital/spark --skill requesting-code-review-automatedigital

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill eliminates the risk of shipping code with undetected security vulnerabilities, logic errors, and test regressions that can cause production outages, security breaches, or wasted review cycles.

Core Features & Use Cases

  • Static Security Scanning: Automatically detects hardcoded secrets, shell injection risks, unsafe eval/exec calls, and SQL injection patterns in added code lines.
  • Baseline-Aware Quality Gates: Compares test and lint results against pre-change baselines to only flag new regressions introduced by your changes, avoiding false positives from existing project issues.
  • Independent Subagent Review: Uses a separate, context-isolated reviewer agent to catch issues the implementer may have missed, with fail-closed rules for security and logic errors.
  • Auto-Fix Loop: Automatically spawns a dedicated fix agent to resolve reported issues, with up to two verification cycles to ensure fixes don't introduce new problems.
  • Use Case: After implementing a new payment processing feature, run this Skill to catch any unparameterized database queries or missing error handling before pushing the code to the shared repository.

Quick Start

Use the requesting-code-review skill to verify my latest code changes before I commit them.

Frequently Asked Questions about requesting-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run pre-commit code verification to catch security vulnerabilities before a git push?

Pre-commit code verification automatically scans added lines for hardcoded secrets, shell injection, and SQL injection patterns. It runs immediately after code modifications are completed and before committing, pushing, or opening a pull request to ensure high-quality code enters the codebase.

How does baseline-aware regression testing work for lint and test failures?

Baseline-aware regression testing compares test and lint results against pre-change baselines to only flag new regressions introduced by your changes. This avoids false positives from existing project issues by isolating failures specifically caused by the current code modifications.

Can I automatically fix code review issues found during pre-commit static scanning?

Yes, automated issue remediation spawns a dedicated fix agent to resolve reported security vulnerabilities and logic errors. The auto-fix loop runs up to two verification cycles to ensure applied fixes do not introduce new problems before passing quality gates.

What is independent subagent code review and how does it prevent logic errors?

Independent subagent code review uses a separate, context-isolated reviewer agent to catch logic errors and security vulnerabilities the implementer missed. It enforces fail-closed rules, blocking code submission if critical security vulnerabilities or unparameterized database queries are detected.

Does pre-commit static security scanning detect hardcoded secrets and unsafe eval calls?

Pre-commit static security scanning automatically detects hardcoded secrets, shell injection risks, unsafe eval and exec calls, and SQL injection patterns. It analyzes added code lines to eliminate undetected security vulnerabilities prior to commit or pull request submission.

When should I use an automated code review loop instead of manual pull request reviews?

Use an automated code review loop after implementing features, bug fixes, or refactoring to eliminate wasted review cycles. It provides baseline-aware test and lint regression analysis plus independent subagent review before pushing code to shared repositories.