review

Analyze PR diffs against the base branch for SQL safety, prompt risks, and side effects.

Updated Mar 29, 2026
One-click install
npx skills add https://github.com/zzxtbeta/design-handbook --skill review-zzxtbeta
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/zzxtbeta/design-handbook/tree/main/.agents/skills/gstack/review
Command: npx skills add https://github.com/zzxtbeta/design-handbook --skill review-zzxtbeta

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

PR diffs often hide SQL safety risks, LLM prompt issues, and unintended side effects that slip into production. This Skill analyzes diffs against the base branch to surface these problems before merging.

Core Features & Use Cases

  • Diff-scoped SQL safety checks (parameterization, injection risks) to prevent unsafe queries.
  • LLM trust boundary validation (prompt safety, data handling, and environment exposure) to shield prompts and secrets.
  • Detection of conditional side effects and cross-cutting changes that could affect downstream behavior.
  • Proactive merge-readiness guidance and actionable recommendations during pre-landing reviews.

Quick Start

Run a pre-landing PR review on the current branch to generate a risk report and recommended fixes.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check a PR diff for SQL injection and parameterization risks?

To check a PR diff for SQL injection risks, this Skill analyzes branch changes against the base branch to identify unsafe queries and flag missing parameterization. It scopes safety validation precisely to the diff, surfacing potential injection vulnerabilities before merging into production.

Can I validate LLM prompt safety and data handling before merging code?

Yes, you can validate LLM prompt safety before merging by running a pre-landing review. This Skill inspects diff changes to detect prompt risks, environment exposure, and trust boundary violations, shielding sensitive data and secrets from unintended leakage in production environments.

What is a pre-landing code review for detecting unintended side effects?

A pre-landing review for side effects is a diff-scoped analysis that compares proposed changes against the base branch. This Skill detects conditional side effects and cross-cutting changes that affect downstream behavior, providing actionable recommendations to ensure merge readiness before code lands.

How do I run an automated risk report on my current branch before merging?

To run an automated risk report on your current branch, trigger a pre-landing PR review. This generates a comprehensive report detailing SQL safety risks, LLM prompt issues, and unintended side effects, complete with concrete recommendations to guide fixes directly within the diff context.

Does this code review Skill work without external dependencies?

Yes, this code review Skill works without external dependencies. It operates independently using its internal scripts and references to analyze PR diffs against the base branch, identifying SQL safety issues, LLM prompt risks, and downstream side effects without requiring additional environment setup.