Skip to content
Back to skills

Weave Review

ASecurity

Review the current diff for avoidable complexity and scope drift: duplicated mechanisms, speculative abstractions, reinvented stdlib, dependencies the platform already covers, and changes outside the request contract. One line per finding. Use when the user says "weave review", "/weave-review", "simplification review", "what can we remove from this change", or "is this over-engineered". Reports only, edits nothing.

  • 3 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 2, 2026
ai-agentsgogitapisecurity

Works with

  • api

Security analysis

A100/100

Scanned October 2, 2026

npx -y skills add GabrielKqw/weave-agent-workflow --skill weave-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Weave Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Weave Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/gabrielkqw-weave-review-weave-agent-workflow/badge)](https://www.skillsdirectory.com/skills/gabrielkqw-weave-review-weave-agent-workflow)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: weave-review
description: >
  Review the current diff for avoidable complexity and scope drift: duplicated
  mechanisms, speculative abstractions, reinvented stdlib, dependencies the
  platform already covers, and changes outside the request contract. One line
  per finding. Use when the user says "weave review", "/weave-review",
  "simplification review", "what can we remove from this change", or "is this
  over-engineered". Reports only, edits nothing.
---

# Weave Review

Review only the current diff (`git diff` plus staged changes) and the direct
callers it touches. Do not edit files.

## Format

`<file>:L<line>: <tag> <what>. <replacement>.`

Tags:

- `delete:` dead code, unused option, speculative feature. Replacement: nothing.
- `reuse:` re-implements something already in this repo. Name the existing helper and its path.
- `stdlib:` hand-rolled thing the standard library ships. Name the function.
- `native:` dependency or code doing what the platform already does. Name the feature.
- `yagni:` abstraction with one implementation, config nobody sets, layer with one caller.
- `shrink:` same logic, fewer lines. Show the shorter form.
- `shared:` fix applied at one call site while the cause lives in a shared function. Name the function.
- `scope:` change not required by the request contract in `.weave/state.md` (or the user's request). Revert it.

## Examples

- `core/date.js:L12-30: native: moment imported for one format call. Intl.DateTimeFormat, 0 deps.`
- `api/users.js:L44: reuse: new pagination helper. lib/paginate.js already does this.`
- `checkout.js:L88: shared: null guard added here only. Guard once in getCart(), all 4 callers covered.`
- `README.md:L10-40: scope: unrelated rewrite of the install section. Not requested; revert.`

## Scoring

Rank by impact, biggest first. End with `net: -<N> lines possible.`

Nothing to cut: `Lean already. Ship.`

## Boundaries

Complexity and scope only. Correctness bugs and security issues go to a
normal review; mention them in one line at the end if you saw one, without
analysis. A small test or self-check is the minimum, never flag it for
deletion. Lists findings, applies nothing.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.