requesting-code-review

Scan staged git diffs for security issues and run baseline-aware tests.

Updated May 26, 2026
One-click install
npx skills add https://github.com/ruiyangruiyi/hermes-agent --skill requesting-code-review-ruiyangruiyi
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: requesting-code-review
Source: https://github.com/ruiyangruiyi/hermes-agent/tree/main/skills/software-development/requesting-code-review
Command: npx skills add https://github.com/ruiyangruiyi/hermes-agent --skill requesting-code-review-ruiyangruiyi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill prevents broken or insecure changes from reaching your repository by running an automated pre-commit verification and an independent reviewer check.

Core Features & Use Cases

  • Static security scan: Detects risky patterns in the staged diff (e.g., secrets, shell injection, eval/exec, unsafe deserialization, and common SQL-injection forms).
  • Baseline-aware tests and linting: Runs appropriate tests and quality gates, comparing against your pre-existing failure baseline to block only newly introduced issues.
  • Fail-closed independent reviewer: Submits only the diff and static scan output to a separate reviewer and blocks on any security/logic failures.
  • Optional auto-fix loop: Attempts up to two targeted fix-and-reverify cycles for the reported issues.

Quick Start

Tell the agent to run requesting-code-review before you commit your staged git changes to ensure security and quality gates pass.

Frequently Asked Questions about requesting-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a pre-commit code review on my staged git diff?

To run a pre-commit code review, trigger the skill on your staged git diff. It scans added lines for security issues, runs baseline-aware tests and lint checks, and delegates logic validation to an independent fail-closed reviewer.

What is baseline-aware testing when checking code before commit?

Baseline-aware testing compares your current test and lint results against a pre-existing failure baseline. This blocks only newly introduced issues from your staged diff, ignoring known historical test failures.

Can I automatically fix security issues found during a pre-commit scan?

Yes, you can automatically fix security issues using the optional auto-fix loop. It attempts up to two targeted fix-and-reverify cycles for reported shell injection, secrets, or unsafe deserialization problems.

Does the pre-commit static scan detect SQL injection and shell injection?

The static scan detects shell injection, eval, unsafe deserialization, secrets, and common SQL-injection patterns. It targets only the added lines in your staged git diff before passing results to an independent reviewer.

What is a fail-closed independent reviewer for code verification?

A fail-closed independent reviewer is a separate validation step that receives your diff and static scan output. It blocks the commit by returning a JSON-only verdict if any security or logic failures are detected.

When should I use automated pre-commit verification instead of just pushing code?

Use automated pre-commit verification for git-based feature work and bug fixes involving multi-file edits. It prevents broken or insecure changes from reaching your repository by validating logic and security before you commit or push.