review

Analyze PR diffs for SQL safety, trust boundaries, and race conditions.

1|Updated Mar 20, 2026
One-click install
npx skills add https://github.com/0xHarbs/agent-setup --skill review-0xharbs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/0xHarbs/agent-setup/tree/main/claude/skills/lifecycle/review
Command: npx skills add https://github.com/0xHarbs/agent-setup --skill review-0xharbs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyzes the current branch's diff against main to surface SQL safety issues, trust-boundary violations, race conditions, and other structural risks before merging, guiding engineers to address problems early.

Core Features & Use Cases

  • Auto-detects stack (Rails/Node/Ruby) and loads the appropriate checklists.
  • Two-pass review: CRITICAL findings (SQL, concurrency, trust) and INFORMATIONAL insights for comprehensive PR documentation.
  • Cross-file analysis prompts consistency checks across diffs and generates acceptance criteria for handoff artifacts.

Quick Start

To start a pre-landing PR review, run the /review workflow against the current branch.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run pre-landing PR safety checks to catch SQL and race-condition issues before merging?

Pre-landing PR safety checks analyze your branch diff against main to surface SQL safety, trust-boundary, and race-condition issues before merging. The review computes a two-pass analysis generating CRITICAL findings and INFORMATIONAL insights to guide remediation.

What does a two-pass code review check for in a pull request diff?

A two-pass code review identifies CRITICAL findings like SQL injection, concurrency, and trust-boundary violations in the first pass, then generates INFORMATIONAL insights for comprehensive PR documentation and acceptance criteria during the second pass.

Does this PR review workflow support Rails, Node, and Ruby repositories?

Yes, the PR review workflow auto-detects your stack across Rails, Node, and Ruby repositories, loading the appropriate base and stack-specific checklists to perform accurate cross-file analysis and consistency checks across diffs.

How do I analyze multi-repo code reviews to preserve main-branch stability?

You can analyze multi-repo code reviews by running the review workflow against your current branch. It computes structured findings with remediation guidance and acceptance criteria, ensuring main-branch stability is preserved across automated pipelines.

Why does my pull request diff analysis flag trust-boundary violations before merging?

Pull request diff analysis flags trust-boundary violations because they represent structural risks that compromise security. The pre-landing review identifies these violations early alongside SQL safety and race-condition issues to ensure clean merges.

What are the limitations of automated PR diff analysis for race-condition detection?

Automated PR diff analysis focuses on structural risks within the provided diff, generating acceptance criteria for handoff artifacts. It operates as a pre-landing safety check and does not replace runtime testing or dynamic concurrency analysis for complex race conditions.