review

Analyzes git diffs against the base branch for structural issues before merging code.

107|7|Updated Mar 29, 2026
One-click install
npx skills add https://github.com/no-session/pstack --skill review-no-session
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/no-session/pstack/tree/main/review
Command: npx skills add https://github.com/no-session/pstack --skill review-no-session

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Code review catches what tests miss: SQL injection risks, race conditions, LLM trust boundary violations, and scope drift. This Skill automates pre-landing PR review so solo founders ship without a second pair of eyes. ## Core Features & Use Cases - Two-Pass Diff Analysis: Runs a critical pass (SQL safety, race conditions, LLM output trust, enum completeness) and an informational pass (dead code, test gaps, performance, CI/CD issues) against the branch diff. - Scope Drift & Plan Completion Audit: Cross-references the diff against TODOS.md, PR descriptions, and plan files to detect scope creep and missing requirements. - Greptile Comment Triage: Fetches, classifies, and replies to Greptile bot review comments with evidence-backed responses and suppression history. - Conditional Design Review: Applies a design checklist (AI slop detection, typography, spacing, interaction states) when frontend files change. - Use Case: Before merging a feature branch, run the review to auto-fix mechanical issues (dead code, N+1 queries, magic numbers) and get batched questions on judgment calls like security or race conditions. ## Quick Start Ask the assistant to review this PR or check my diff against the base branch before merging.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a PR diff before merging?

Run the review workflow on your feature branch. It fetches the latest base branch, generates the full diff, and applies a two-pass checklist covering SQL safety, race conditions, LLM trust boundaries, and informational issues like dead code and test gaps.

What does automated code review catch that tests miss?

It catches structural issues tests do not cover: SQL string interpolation, TOCTOU race conditions, unvalidated LLM output written to databases, enum values not handled by all consumers, and conditional side effects where one branch skips an action.

Does this code review work with GitLab merge requests?

Yes. The workflow detects the platform from the git remote URL and uses glab CLI for GitLab or gh CLI for GitHub. If neither CLI is available, it falls back to git-native commands to determine the base branch.

How does the review handle Greptile bot comments?

It fetches Greptile line-level and top-level PR comments via the GitHub API, classifies each as valid, already fixed, false positive, or suppressed based on project history, then posts evidence-backed replies using tiered templates.

When does the design review run during code review?

Design review runs only when the diff touches frontend files, detected via the pstack-diff-scope tool. It checks for AI slop patterns, typography issues, spacing problems, and missing interaction states, calibrated against DESIGN.md if present.

What are the limitations of diff-based code review?

Diff-based review cannot verify runtime behavior, so it flags issues for human judgment on security, race conditions, and design decisions rather than auto-fixing them. Enum completeness checks require reading files outside the diff, which adds review time.