requesting-code-review

Automate pre-commit code verification with security analysis, regression tests, and subagent review.

1|Updated Jul 31, 2026
One-click install
npx skills add https://github.com/icyzh/hermes-web --skill requesting-code-review-icyzh
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: requesting-code-review
Source: https://github.com/icyzh/hermes-web/tree/main/skills/software-development/requesting-code-review
Command: npx skills add https://github.com/icyzh/hermes-web --skill requesting-code-review-icyzh

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill prevents bugs, security vulnerabilities, and regressions from entering your codebase by enforcing an automated, independent verification pipeline before any code is committed.

Core Features & Use Cases

  • Automated Security Scanning: Detects hardcoded secrets, shell injections, and unsafe deserialization patterns in real-time.
  • Quality Gates: Runs baseline-aware linting and test suites to ensure new changes do not introduce regressions.
  • Independent Reviewer Subagent: Employs a secondary, isolated AI agent to perform a logic and security audit of the diff, providing a fail-closed verdict.

Quick Start

Run the requesting-code-review skill to verify your current git changes before committing them to the repository.

Frequently Asked Questions about requesting-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate pre-commit security checks and static analysis for my git changes?

Automating pre-commit security checks uses static analysis to detect hardcoded secrets, shell injections, and unsafe deserialization before code is committed. This skill enforces that automated pipeline to block vulnerabilities from entering the codebase.

What is an independent subagent review for code quality and security compliance?

An independent subagent review uses a secondary, isolated AI agent to perform a logic and security audit on your git diff. It provides a fail-closed verdict to ensure high code quality and security compliance before merging changes.

Does automated pre-commit code verification work with my existing test runners and linting tools?

Automated pre-commit code verification works with standard language-specific test runners and linting tools. You must have git, these testing frameworks, and linting tools present in your development environment to execute baseline-aware regression testing.

How do I prevent regressions and security vulnerabilities before merging code changes?

Preventing regressions and security vulnerabilities before merging requires running baseline-aware test suites and automated security scanning. This skill enforces an independent verification pipeline that blocks commits introducing hardcoded secrets or unsafe patterns.

What are the limitations of automated pre-commit code review for software development workflows?

The limitations of automated pre-commit code review include strict dependency on existing local environments; it requires git, standard language-specific test runners, and linting tools to be pre-configured, meaning it cannot execute verification in environments lacking these baseline utilities.