review

Invoke the review skill with a phrase like "review this PR" or "check my diff". It analyzes git diff against the base branch, runs critical and informational checklist passes, and reports findings with auto-applied fixes and items needing your input.

It catches SQL injection and N+1 queries, race conditions, unvalidated LLM output written to databases, shell injection, incomplete enum handling, async/sync mixing, type coercion bugs, and CI/CD pipeline misconfigurations, each cited with file and line.

Yes, mechanical fixes like dead code removal, missing eager loading, and magic numbers are applied automatically. Riskier changes such as security fixes, race conditions, or behavior changes are batched into a single question for your decision.

Yes, it fetches Greptile line-level and top-level comments via the gh API, classifies them as valid, already fixed, or false positive, and posts evidence-backed replies. Per-project history suppresses known false positives.

The design checklist runs only when the diff touches frontend files, detected via gstack-diff-scope. It flags AI-slop patterns, typography and spacing issues, and missing interaction states, calibrated against the repo's DESIGN.md if one exists.

It reviews only the diff against the base branch plus directly related consumers, so systemic issues outside the change may be missed. Low-confidence design findings require visual verification, and it depends on git, the gh CLI, and gstack binaries being installed.