skills.rest
adamtpang
adamtpangCOMMUNITY
Explore all skills by this author →
Website𝕏@adamtpangGitHub

review

Reviews pull request diffs for SQL safety, race conditions, and LLM trust boundary violations.

Updated Jun 16, 2026
Search Tags:#static analysis#code review#pull request#sql injection#github#race conditions#git diff
One-click install
npx skills add https://github.com/adamtpang/summon.company --skill review-adamtpang
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/adamtpang/summon.company/tree/main/.claude/skills/review
Command: npx skills add https://github.com/adamtpang/summon.company --skill review-adamtpang

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Catching structural bugs before code lands is hard: SQL injection, race conditions, unvalidated LLM output, and incomplete enum handling slip through manual review. This Skill automates a pre-landing review of your branch diff so critical issues are found and often fixed before merge. ## Core Features & Use Cases - Two-pass diff analysis: Runs a CRITICAL pass (SQL safety, race conditions, LLM trust boundaries, shell injection, enum completeness) followed by an INFORMATIONAL pass (async mixing, type coercion, CI/CD pipeline issues). - Parallel specialist subagents: Dispatches dedicated reviewers for testing gaps, maintainability, security, performance, data migrations, API contracts, and adversarial red-team analysis on large diffs. - Fix-First workflow: Mechanical fixes (dead code, N+1 queries, magic numbers) are applied automatically, while judgment calls are batched into a single structured decision question. - Greptile triage: Fetches, classifies, and replies to Greptile bot comments on GitHub PRs with evidence-backed responses. - Use Case: Before merging a feature branch, ask for a review and get a report of critical and informational issues with auto-applied fixes, plus design checklist findings when frontend files changed. ## Quick Start Ask the assistant to review this PR against the base branch before merging.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a pull request diff before merging?▼

Invoke the review skill on your feature branch and it analyzes the diff against the base branch. It runs a critical pass for SQL safety, race conditions, and injection risks, then an informational pass for lower-severity issues, auto-fixing mechanical problems.

What issues does an automated pre-landing code review catch?▼

It catches SQL injection, TOCTOU race conditions, unvalidated LLM output written to databases, shell injection, incomplete enum handling, N+1 queries, missing negative-path tests, and CI/CD pipeline misconfigurations, each cited with file and line.

Does the review skill work with frontend code changes?▼

Yes, when the diff touches frontend files it runs a design checklist covering AI slop patterns, typography, spacing, interaction states, and DESIGN.md violations. If no frontend files changed, the design review is skipped silently.

Can it triage Greptile bot comments on GitHub PRs?▼

Yes, it fetches Greptile line-level and top-level comments via the GitHub API, classifies them as valid, already fixed, or false positive, and posts evidence-backed replies. Per-project history suppresses known false positives.

When does the review auto-fix issues versus asking the user?▼

Mechanical fixes like dead code removal, N+1 eager loading, and magic numbers are auto-applied. Security issues, race conditions, design decisions, and fixes over 20 lines are batched into a single user question since they require judgment.

Related Skills

Explore More Software Engineering Skills→
mykaarmamykaarma

git-commit

Create conventional commit messages and push code changes.

Official
Intermediate
SoSoBurnerSoSoBurner

ship

Automate code deployment by running tests, reviewing diffs, and creating a pull request.

Community
Advanced
aquariuscookaquariuscook

sherlock-review

Analyze code, tests, and runtime output to validate implementation claims.

Community
Advanced
rolopez23rolopez23

simplify

Review staged code diffs and apply conservative refactors with human sign-off.

Community
Intermediate