requesting-code-review

Automates pre-commit Git code review detecting security vulnerabilities, logic errors, and test regressions for Python, Node, Rust, Go projects.

247|22|Updated Dec 11, 2024
One-click install
npx skills add https://github.com/graniet/kheish --skill requesting-code-review-graniet
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: requesting-code-review
Source: https://github.com/graniet/kheish/tree/main/skills/software-development/requesting-code-review
Command: npx skills add https://github.com/graniet/kheish --skill requesting-code-review-graniet

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill eliminates the risk of committing code with undetected security vulnerabilities, logic errors, or test regressions that manual review often misses, ensuring only verified, high-quality code enters the repository.

Core Features & Use Cases

  • Static Security Scanning: Automatically detects hardcoded secrets, injection flaws, unsafe eval/exec calls, and other high-risk patterns in added code lines.
  • Baseline-Aware Quality Gates: Only flags new test failures or lint errors introduced by your changes, ignoring pre-existing issues in the codebase.
  • Independent Code Review: Uses a separate subagent with no context of your implementation to catch issues you might have overlooked, with fail-closed rules for security and logic errors.
  • Auto-Fix Loop: Automatically resolves reported security and logic issues with up to two fix-and-reverify cycles, reducing manual remediation work. Use case: A developer finishing a bug fix can run this skill before committing to catch any overlooked security risks or regressions without waiting for a human reviewer.

Quick Start

Use the requesting-code-review skill to verify your recent code changes before committing them to the git repository.

Frequently Asked Questions about requesting-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security scanning before a git commit?

Pre-commit code review automates security scanning, static analysis, and logic error detection on staged code changes before they enter the repository, ensuring only verified code is committed.

Can I run an automated code review that ignores pre-existing lint errors?

Yes, baseline-aware quality gates evaluate only newly introduced test failures and lint errors, ignoring pre-existing codebase issues to ensure your commit passes verification.

Does this pre-commit verification support Python, Node, Rust, and Go projects?

Yes, this pre-commit verification workflow executes static security scanning and quality gating for Python, Node, Rust, and Go projects within git-based development environments.

What is the best way to auto-fix security vulnerabilities detected in staged code?

An auto-fix loop automatically resolves reported security and logic defects through up to two fix-and-reverify cycles, reducing manual remediation effort before a git push.

How does independent code review catch overlooked logic errors?

Independent code review uses a separate subagent with no implementation context to catch overlooked logic errors, applying fail-closed rules for security vulnerabilities and test regressions.