review

Analyze PR code changes for security vulnerabilities and code quality issues.

Updated Jun 5, 2026
One-click install
npx skills add https://github.com/yeisme/pinax --skill review-yeisme
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/yeisme/pinax/tree/main/.agents/skills/review
Command: npx skills add https://github.com/yeisme/pinax --skill review-yeisme

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill performs pre-landing PR reviews, analyzing code changes for potential issues like SQL injection, LLM output trust boundary violations, conditional side effects, and more, to ensure code quality and safety.

Core Features & Use Cases

  • Code Safety: Analyzes diff against the base branch for SQL safety, LLM trust boundary violations, and conditional side effects.
  • Review Workflow: Facilitates a structured review process, including planning, snapshotting, applying changes, and restoring if needed.
  • Use Case: Use this Skill when asked to "review this PR", "code review", "pre-landing review", or "check my diff" to ensure your code changes meet quality standards.

Quick Start

Run the /review skill to start a PR review.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a pre-landing code review on my PR diff?

Run the review command to analyze your PR diff against the base branch for SQL injection, LLM trust boundary violations, conditional side effects, and code quality issues before landing changes.

What does a pre-landing PR review check for in code changes?

A pre-landing PR review analyzes code changes for SQL injection, LLM output trust boundary violations, race conditions, conditional side effects, and code quality issues to ensure safety and quality.

Can I review LLM-generated code for security and trust boundary issues?

Yes, you can review LLM-generated code for safety by analyzing LLM output trust boundary violations and potential security vulnerabilities within the PR diff to prevent unsafe content integration.

How does the review workflow handle applying and restoring code changes?

The review workflow facilitates a structured process including planning, snapshotting, applying changes, and restoring the previous state if needed during the pre-landing PR review.

When should I use an automated code review for SQL injection and race conditions?

Use an automated code review when checking a PR diff for SQL injection, race conditions, and conditional side effects to ensure code safety and quality in collaborative development environments before landing.