review

Analyze pull request diffs for SQL injection, LLM trust boundary, and structural issues.

Updated May 9, 2026
One-click install
npx skills add https://github.com/kk20300113-png/my-claude-skills --skill review-kk20300113-png
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/kk20300113-png/my-claude-skills/tree/main/review
Command: npx skills add https://github.com/kk20300113-png/my-claude-skills --skill review-kk20300113-png

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill eliminates the risk of shipping code with undetected critical structural issues, SQL injection vulnerabilities, LLM trust boundary violations, and unintended conditional side effects by analyzing pull request diffs before merge, avoiding costly post-production fixes and security breaches.

Core Features & Use Cases

  • Pre-landing Diff Analysis: Scans pull request changes against the base branch to flag SQL safety risks, LLM prompt injection vulnerabilities, conditional side effects, and other structural code issues.
  • Proactive Merge Prompts: Automatically suggests a review when a user is about to merge or land code changes, reducing the chance of shipping broken or insecure code.
  • Use Case: For example, if a developer is preparing to merge a PR that adds a new user-facing API with raw SQL queries, this skill will flag potential SQL injection risks and LLM trust boundary violations before the code is deployed to production.

Quick Start

Ask the AI to run the review skill on your current pull request diff to get a prioritized list of critical issues, security risks, and suggested fixes before you merge.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a pre-merge code review on my pull request diff?

To run a pre-merge code review, ask the AI to execute the review skill on your current pull request diff. It analyzes changes against the base branch to flag structural issues, SQL safety risks, and LLM trust boundary violations before merge.

What is pre-landing diff analysis for SQL safety and LLM trust boundaries?

Pre-landing diff analysis scans pull request changes to detect SQL injection vulnerabilities and LLM prompt injection risks. It validates SQL safety and enforces LLM trust boundaries to prevent security breaches before deploying code to production.

Can I use this PR review skill to detect conditional side effects in version-controlled codebases?

Yes, you can use this PR review skill to detect conditional side effects in version-controlled codebases. It performs structural code quality checks on pull request diffs to identify unintended side effects prior to code merge.

Does this code review tool automatically suggest checks before landing code changes?

Yes, this code review tool automatically suggests a review when a user is about to merge or land code changes. This proactive prompt reduces the chance of shipping broken or insecure code by validating the diff beforehand.

What's the best way to validate LLM trust boundaries in a new user-facing API?

The best way to validate LLM trust boundaries is by running a pre-landing diff analysis on the pull request. It flags LLM prompt injection vulnerabilities and trust boundary violations in new user-facing APIs before code deployment.