What problem does it solve?
This Skill eliminates the risk of shipping insecure or low-quality code by catching security vulnerabilities, logic errors, and test regressions before code is committed to a git repository, removing reliance on manual post-commit review that often misses critical issues.
Core Features & Use Cases
- Static Security Scans: Automatically detect hardcoded secrets, shell injection risks, unsafe eval/exec calls, and SQL injection patterns in added code lines.
- Baseline-Aware Quality Checks: Compare test and lint results against pre-change baselines to flag only new regressions introduced by your changes, avoiding false positives from pre-existing issues.
- Independent Subagent Review: Uses a separate, context-isolated reviewer agent to catch issues the implementer may have missed, with strict fail-closed rules that block commits for any detected security or logic problems.
- Auto-Fix Loop: Automatically spawns a dedicated fix agent to resolve reported security and logic issues, with a maximum of 2 fix-and-reverify cycles to prevent infinite loops.
- Use Case: After implementing a new payment processing feature, run this Skill to verify no hardcoded credentials or SQL injection flaws exist before pushing the code to the production repository.
Quick Start
Use the requesting-code-review skill to verify your recent code changes and catch any security or quality issues before you commit them to git.