scrutinize

Review codebases for logic errors, security vulnerabilities, and edge cases.

1|Updated Mar 6, 2026
One-click install
npx skills add https://github.com/DaBigHomie/ugwtf --skill scrutinize-dabighomie
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: scrutinize
Source: https://github.com/DaBigHomie/ugwtf/tree/main/.cursor/skills/scrutinize
Command: npx skills add https://github.com/DaBigHomie/ugwtf --skill scrutinize-dabighomie

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

SCRUTINIZE addresses the need for a detailed code review process, ensuring logic correctness, security, and edge case handling beyond the scope of policy-based gates.

Core Features & Use Cases

  • Logic Correctness: Detects off-by-one errors, null paths, and asynchronous race conditions.
  • Security: Identifies SQL injection vulnerabilities, RLS bypass, exposed secrets, and unvalidated input.
  • Data Flow: Checks for type coercion, JSONB casting issues, and shape mismatches in Supabase queries.
  • Edge Cases: Audits for empty arrays, deleted rows, network failure paths, and retry storms.
  • FSD Import Direction: Validates compliance with the specified import direction policy.
  • Dead Code: Identifies orphaned exports and unreachable branches.
  • Use Case: Integrate SCRUTINIZE into your workflow to perform a thorough review before merging code, ensuring high-quality, secure, and maintainable codebases.

Quick Start

Run SCRUTINIZE by typing: npx tsx src/index.ts scrutinize <repo> from the repository root directory.

Frequently Asked Questions about scrutinize

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a deep code review for logic correctness and security vulnerabilities?

To perform deep code review for logic correctness and security, run a script that detects off-by-one errors, null paths, race conditions, and SQL injection vulnerabilities. This requires type checking, linting, and build steps to be completed prior to execution.

What is the best way to audit edge cases and security flaws in a Supabase codebase?

To audit edge cases and security in a Supabase codebase, use a review process that identifies type coercion, JSONB casting issues, RLS bypass, exposed secrets, and unvalidated input to ensure data flow shape mismatches are caught.

How do I check my codebase for dead code and orphaned exports before merging?

Checking for dead code and orphaned exports before merging involves running an analysis script to identify unreachable branches and orphaned exports. This ensures high-quality, secure, and maintainable codebases by validating import direction compliance and removing dead code.

Does deep code review require type checking and linting to be completed first?

Yes, deep code review requires type checking, linting, and build steps to be completed prior to execution. This prerequisite ensures the analysis can focus on in-depth logic correctness, security vulnerabilities, and edge case handling beyond basic syntax checks.

Why should I use a deep code analysis script instead of basic syntax checks?

You should use a deep code analysis script instead of basic syntax checks to detect complex issues like asynchronous race conditions, retry storms, and network failure paths. It provides in-depth analysis for logic correctness, security, and edge cases beyond the scope of policy-based gates.