requesting-code-review

Run a pre-commit verification pipeline that scans the staged diff for security issues, runs tests and linters against a pre-change baseline, and dispatches an independent reviewer subagent. Only new failures introduced by your changes block the commit.

Grep added lines from git diff --cached for patterns like api_key, secret, password, or token assigned to quoted strings of six or more characters. Any match is treated as a security concern that fails verification.

Pre-commit review verifies your own local changes before committing, using static scans and an independent reviewer subagent. GitHub PR review examines other people's pull requests and posts inline comments on the platform.

Yes, it auto-detects the project language and runs the appropriate tools: pytest, npm test, cargo test, or go test, plus linters like ruff, mypy, eslint, clippy, and go vet when installed. Missing tools are skipped silently without failing.

The pipeline allows a maximum of two fix-and-reverify cycles using a separate fix agent. If failures persist after two attempts, it escalates to the user with the remaining issues and suggests git stash or git reset to undo the changes.

Skip verification for documentation-only changes, pure configuration tweaks, or when the user explicitly says to skip it. The pipeline also exits early when the diff is empty or the directory is not a git repository.