review

Analyze diffs for SQL safety risks and LLM trust boundary violations.

Updated Dec 26, 2025
One-click install
npx skills add https://github.com/tony30552001/Genpic-master --skill review-tony30552001
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/tony30552001/Genpic-master/tree/main/.agents/skills/gstack/review
Command: npx skills add https://github.com/tony30552001/Genpic-master --skill review-tony30552001

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Pre-landing PR review analyzes changes against the base branch to identify SQL safety issues, LLM trust boundary violations, conditional side effects, and other structural concerns before merge.

Core Features & Use Cases

  • Automated diff analysis to surface potential SQL safety risks, such as unsafe string interpolation, missing parameterization, and silent data exposure.
  • Detection of LLM trust boundary violations, prompt leakage risks, and data access concerns in code changes.
  • Flagging of conditional side effects and non-deterministic behaviors, with concrete remediation recommendations.
  • Proactive guidance for reviewers on merge readiness, risk hotspots, and testing plans.

Quick Start

Provide the PR diff or merge request URL and ask me to review it.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How does pre-landing PR review detect SQL safety risks in code diffs?

Pre-landing PR review analyzes code diffs against the base branch to detect SQL safety risks by identifying unsafe string interpolation, missing parameterization, and silent data exposure before merge.

What are LLM trust boundary violations in a pull request?

LLM trust boundary violations in a pull request involve prompt leakage risks and improper data access concerns. PR review detects these structural issues in code changes to prevent unintended data exposure.

How do I review a PR diff for conditional side effects before merging?

To review a PR diff for conditional side effects, provide the PR diff or merge request URL. The review process flags non-deterministic behaviors and generates concrete remediation recommendations.

Can I get automated remediation guidance for merge readiness from a code review?

Yes, you can get automated remediation guidance for merge readiness. The code review generates risk signals, identifies hotspots, and prompts proactive review decisions when merging is imminent.

Does the PR review workflow work without external dependencies?

The PR review workflow works without external dependencies, integrating directly with the PR context to deliver deterministic outputs for analyzing diffs and identifying structural concerns.