review

Analyze git diffs against the base branch for SQL safety and trust boundary issues.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/steffenpharai/StartupFramework --skill review-steffenpharai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/steffenpharai/StartupFramework/tree/main/.claude/skills/gstack/.agents/skills/gstack-review
Command: npx skills add https://github.com/steffenpharai/StartupFramework --skill review-steffenpharai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyzes PR diffs to surface structural issues, SQL safety concerns, and trust-boundary risks before merging.

Core Features & Use Cases

  • Automated diff analysis: Scans diffs for SQL safety, access-control violations, and side effects.
  • Drift detection & requirements: Compares the PR intent against TODOS/description and commit messages to detect scope creep.
  • Actionable guidance: Generates concrete next steps, questions, and checks to streamline approvals.

Quick Start

Run the PR review workflow to analyze the current diff against the base branch and surface actionable findings.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate pre-landing PR reviews for SQL safety and LLM trust boundaries?

Automated PR review analyzes code diffs against the base branch to surface SQL safety, LLM trust boundary violations, and conditional side effects. It uses commit messages and descriptions to detect drift and generate actionable, structured guidance before merging.

What is the best way to detect scope creep and missing requirements in a git diff?

Detecting scope creep in a git diff involves comparing PR intent against TODOS, descriptions, and commit messages. This automated drift detection identifies missing requirements and structural issues, outputting concrete next steps, checks, and questions to streamline code approvals.

Can I use automated diff analysis to find access-control violations before merging code?

Automated diff analysis scans PR changes to find access-control violations, SQL safety concerns, and side effects before merging code. It requires a Git repository with a known base branch to generate structured guidance suitable for follow-up actions and approvals.

How does git diff analysis handle conditional side effects in pull requests?

Git diff analysis identifies conditional side effects in pull requests by examining structural changes within the diffs. It proactively surfaces these regressions alongside trust-boundary risks, providing actionable checks and telemetry logs to prevent safety or quality degradation.

Do I need a specific base branch setup to run AI-assisted code reviews?

AI-assisted code reviews require a Git repository with a known base branch to function correctly. The workflow uses this base branch reference to analyze diffs, detect intent drift, and output structured guidance for follow-up actions.

What limitations exist when reviewing merge requests for LLM trust boundary violations?

Reviewing merge requests for LLM trust boundary violations relies on comparing diffs against a known base branch. The analysis is limited to detecting structural issues, SQL safety risks, and drift from commit messages, requiring existing PR data to generate actionable findings.