What problem does it solve?
Pull requests often contain subtle but critical bugs like SQL injection, race conditions, and LLM trust boundary violations that manual review misses. This skill provides a systematic, two-pass review process to catch these issues before code merges, preventing production incidents and data loss.
Core Features & Use Cases
- Two-Pass Review: First pass flags critical issues (SQL safety, race conditions, shell injection, enum completeness). Second pass catches informational issues (async/sync mixing, dead code, LLM prompt issues, type coercion).
- Specialist Subagents: Delegates to parallel specialists for testing gaps, maintainability, performance, security, data migration, API contracts, and red team adversarial analysis.
- Fix-First Workflow: Auto-fixes mechanical issues (N+1 queries, magic numbers, dead code) while escalating security and design decisions to the user.
- Greptile Integration: Fetches and triages Greptile bot comments on GitHub PRs, classifying them as valid, false positives, or already fixed.
Quick Start
Ask Claude to review your current pull request diff for SQL injection risks, race conditions, LLM trust boundary violations, and other structural issues before you merge the code.