review

Analyze PR diffs against the base branch for SQL safety and LLM trust boundary issues.

Updated Mar 14, 2026
One-click install
npx skills add https://github.com/Bradliebs/VolumeTurtle --skill review-bradliebs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/Bradliebs/VolumeTurtle/tree/main/.gstack/review
Command: npx skills add https://github.com/Bradliebs/VolumeTurtle --skill review-bradliebs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

PR reviews are time-consuming and error-prone. This Skill analyzes the diff against the base branch to surface SQL safety issues, LLM trust boundary violations, and other structural problems before merging.

Core Features & Use Cases

  • Analyzes diffs for SQL safety, LLM trust boundaries, and conditional side effects.
  • Proactively suggests changes before land to reduce risk and speed up reviews.
  • Use Case: When a PR is about to land, run this skill to surface issues like potential SQL injections or prompt leakage.

Quick Start

Run the review skill on a PR diff to surface risk factors before merging.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate PR review to catch SQL injection and prompt leakage before merging?

Automating PR review involves analyzing the diff against the base branch to surface SQL injection risks, LLM prompt leakage, and trust boundary violations. This proactively detects structural issues and unintended side effects, reducing manual review time and merge risk.

What is LLM trust boundary analysis in pre-landing code checks?

LLM trust boundary analysis evaluates code diffs to identify prompt leakage and unauthorized LLM access paths before code merges. It detects violations where untrusted inputs might bypass safety controls, ensuring prompt integrity and preventing unintended model behaviors in production.

Does automated diff analysis detect conditional side effects and SQL safety issues?

Yes, automated diff analysis detects conditional side effects and SQL safety issues by evaluating code changes against the base branch. It surfaces potential SQL injection vectors and evaluates structural logic to identify unintended consequences before landing code.

How do I run pre-landing checks to score risk factors on a pull request?

Run pre-landing checks by executing the review skill directly on a PR diff to score risk factors. This analyzes the changes against the base branch, calculates automated risk scoring for SQL and LLM vulnerabilities, and provides proactive guidance for safe merges.

What are the limitations of automated PR diff analysis for catching security vulnerabilities?

Automated PR diff analysis focuses on SQL safety, LLM trust boundaries, and structural side effects but may not catch complex business logic flaws or runtime vulnerabilities outside the diff context. It serves as a proactive pre-check to guide reviewers, not a replacement for comprehensive security audits.