review-checklist

Verify pre-merge code reviews for database, security, and test hygiene issues.

Updated Mar 21, 2026
One-click install
npx skills add https://github.com/caelum0x/steelbot --skill review-checklist-caelum0x
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review-checklist
Source: https://github.com/caelum0x/steelbot/tree/main/skills/review-checklist
Command: npx skills add https://github.com/caelum0x/steelbot --skill review-checklist-caelum0x

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It prevents common, repeatable pre-merge mistakes by turning recurring AI reviewer feedback into a consistent verification checklist.

Core Features & Use Cases

  • Covers high-frequency failure modes across database safety, security and data redaction, string/path handling, and trait wrapper correctness.
  • Supports secure review discipline by ensuring destructive actions require approval, preventing credential leakage, and validating untrusted data boundaries.
  • Improves test reliability by flagging unsafe temp paths, global state mutation issues, and accidental real network calls.

Quick Start

Ask the AI to apply the review-checklist to your PR titled with a phrase like “review checklist” and confirm each item with evidence from the changed files.

Frequently Asked Questions about review-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I catch recurring code review issues before merging a pull request?

To catch recurring code review issues before merging, apply a standardized pre-merge checklist that verifies transactional database updates, redacts sensitive parameters from logs, and validates network targets to prevent SSRF. This enforces review discipline across database safety, security, and test hygiene.

What should a pre-merge checklist verify for database operations and test hygiene?

A pre-merge checklist for database operations and test hygiene should verify that destructive actions require approval, transactional DB updates are enforced, and unit tests use safe temp handling with mocks instead of real network calls to prevent global state mutation.

How do I prevent prompt injection and credential leakage during security review?

To prevent prompt injection and credential leakage during security review, validate untrusted data boundaries and ensure sensitive parameters are redacted from logs and broadcasts before merging any security-sensitive tooling changes.

Can I use a review checklist for Rust trait wrapper chains and unsafe string handling?

Yes, a review checklist applies to Rust trait wrapper chains and unsafe string or path handling by verifying correctness across high-frequency failure modes and ensuring destructive actions require explicit approval before integration.

How do I apply a review checklist to my pull request?

To apply a review checklist to your pull request, ask the AI to run the verification using a phrase like review checklist, then confirm each item with evidence directly from the changed files to ensure all safety and security criteria pass.