review

Analyze code review diffs for SQL injection and trust boundary issues.

Updated Jun 9, 2026
One-click install
npx skills add https://github.com/joyce820309/holo-oahu --skill review-joyce820309
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/joyce820309/holo-oahu/tree/main/.skills/gstack/review
Command: npx skills add https://github.com/joyce820309/holo-oahu --skill review-joyce820309

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires Bash, Read, Edit, Write, Grep, Glob, Agent, AskUserQuestion, WebSearch, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill simplifies and streamlines the code review process, making it easier to analyze PRs, detect potential issues, and suggest improvements before merging changes.

Core Features & Use Cases

  • Code Review Analysis: Analyze diffs against the base branch for SQL safety, LLM trust boundary violations, conditional side effects, and other structural issues.
  • Pre-Landing Review: Conduct a pre-landing review to catch potential problems early in the development cycle.
  • Proactive Suggestions: Suggest relevant skills and actions proactively based on the user's workflow.

Quick Start

Run the 'review this PR' command to initiate a code review analysis on the current PR.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review and diff analysis for potential security issues?

PR diff analysis examines code changes against the base branch to detect SQL injection, race conditions, and LLM trust boundary violations. You can initiate this by running the 'review this PR' command to catch structural issues before merging changes.

What specific issues can diff analysis detect in a development workflow?

Diff analysis detects SQL safety issues, LLM trust boundary violations, conditional side effects, and race conditions. It identifies structural problems in PR diffs to suggest improvements before merging changes into the development workflow.

How do I run a pre-landing review to catch code issues early?

Pre-landing review analyzes PR diffs to catch potential problems early in the development cycle. Running the 'review this PR' command initiates this process to identify security and structural issues before code lands.

Does this code review tool require specific command line capabilities?

Code review automation requires Bash, Read, Edit, Write, Grep, Glob, Agent, AskUserQuestion, and WebSearch capabilities. These dependencies enable the tool to analyze diffs, read files, and conduct security checks within your development workflow.

Can I analyze PR diffs for SQL injection and race conditions?

Analyzing PR diffs for SQL injection and race conditions is a core feature of automated code review. The tool examines changes against the base branch to identify these security vulnerabilities and suggest proactive improvements before merging.