What problem does it solve?
This skill eliminates the risk of shipping code with undetected critical structural issues, SQL injection vulnerabilities, LLM trust boundary violations, and unintended conditional side effects by analyzing pull request diffs before merge, avoiding costly post-production fixes and security breaches.
Core Features & Use Cases
- Pre-landing Diff Analysis: Scans pull request changes against the base branch to flag SQL safety risks, LLM prompt injection vulnerabilities, conditional side effects, and other structural code issues.
- Proactive Merge Prompts: Automatically suggests a review when a user is about to merge or land code changes, reducing the chance of shipping broken or insecure code.
- Use Case: For example, if a developer is preparing to merge a PR that adds a new user-facing API with raw SQL queries, this skill will flag potential SQL injection risks and LLM trust boundary violations before the code is deployed to production.
Quick Start
Ask the AI to run the review skill on your current pull request diff to get a prioritized list of critical issues, security risks, and suggested fixes before you merge.