What problem does it solve?
This Skill eliminates the risk of shipping code with undetected security vulnerabilities, logic errors, and test regressions that can cause production outages, security breaches, or wasted review cycles.
Core Features & Use Cases
- Static Security Scanning: Automatically detects hardcoded secrets, shell injection risks, unsafe eval/exec calls, and SQL injection patterns in added code lines.
- Baseline-Aware Quality Gates: Compares test and lint results against pre-change baselines to only flag new regressions introduced by your changes, avoiding false positives from existing project issues.
- Independent Subagent Review: Uses a separate, context-isolated reviewer agent to catch issues the implementer may have missed, with fail-closed rules for security and logic errors.
- Auto-Fix Loop: Automatically spawns a dedicated fix agent to resolve reported issues, with up to two verification cycles to ensure fixes don't introduce new problems.
- Use Case: After implementing a new payment processing feature, run this Skill to catch any unparameterized database queries or missing error handling before pushing the code to the shared repository.
Quick Start
Use the requesting-code-review skill to verify my latest code changes before I commit them.