requesting-code-review

Run git diff --cached to capture staged changes, scan added lines for secrets and injection patterns, then run the project's test suite and linters. An independent reviewer subagent evaluates the diff and returns a JSON pass/fail verdict before the commit proceeds.

Pipe git diff --cached through grep for added lines matching patterns like api_key, secret, password, or token assigned to quoted strings. Any match is treated as a security concern that blocks the commit until fixed.

Pre-commit review verifies your own local changes before they are committed, using static scans and an independent subagent. GitHub PR review examines other people's pull requests on GitHub and posts inline comments on the platform.

Yes. If no test framework is detected, the regression check is skipped silently and the reviewer subagent verdict still runs. Missing lint tools are also skipped without failing the pipeline.

The pipeline allows a maximum of 2 fix-and-reverify cycles using a separate fix agent. If issues remain after both attempts, it escalates to the user with the remaining problems and suggests git stash or git reset to undo the changes.

Skip verification for documentation-only changes, pure configuration tweaks, or when the user explicitly says to skip it. It is designed for code changes involving two or more file edits in a git repository.