Review code diffs for security risks and shell script quality.
npx skills add https://github.com/shiiman/dotfiles --skill review-shiiman
Please help me install this Agent Skill. Skill: review Source: https://github.com/shiiman/dotfiles/tree/main/.claude/skills/review Command: npx skills add https://github.com/shiiman/dotfiles --skill review-shiiman
Streamlines the process of reviewing code changes by surfacing security risks, shell script quality concerns, and compatibility issues, enabling faster, safer releases.
Run the review on the target changes to receive a security, shell-script quality, and compatibility assessment.
High-intent search queries and answers about installing and using this skill.
Automated code review scans git diffs to surface security risks like credential exposure and command injection. It analyzes staged, unstaged, or branch changes to produce a structured assessment with actionable improvement suggestions.
Shell script quality checking reviews staged changes for unsafe eval usage, proper quoting, and error handling. It applies lint-like assessments to shell scripts within the code changes to identify compatibility and quality concerns.
Security review supports optional targeting via file paths. You can apply checks to specific files instead of analyzing the full diff, focusing the assessment on credential exposure and sanitized inputs only where needed.
The best way to check for credential exposure in a feature branch is running an automated review against the default branch diff. This surfaces security risks, shell script quality issues, and compatibility concerns for faster releases.
Automated code review detects command injection risks by checking for unsafe eval usage and unsanitized inputs in shell scripts. It enforces security checks across code changes and generates structured improvement suggestions.
Automated code review is limited to security, shell script quality, and compatibility checks. It should not replace human review for complex architectural decisions, business logic validation, or performance assessment of code changes.
jack-michaudFlag unnecessary test artifacts and temporary files in pull requests.
timequityScan generated code for OWASP vulnerabilities and produce security reports.
adaptive-enforcement-labEnforce required CI status checks on GitHub pull requests before merge.
softsparkDetect and execute linters and type checkers for Python, JavaScript, PHP, Go, Dart, and Rust projects.
