Installs into .claude/skills of the current project.
Are you the author of Review It?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/hcaiano-review-it)
---
name: review-it
description: "Pre-PR review: grade a finished change by risk, have another model family review it, and fix the findings. Use before opening or updating a PR."
---
# Review it
## 1. Pin
Run the affected checks, commit everything including new files, fetch the
target branch, and pin `<merge-base with origin/<target>>..HEAD`. HEAD stays fixed while reviewers run.
Write down the intent and acceptance criteria, chat-only ones included, and the
model families that wrote the change, delegated workers included. Unknown
authorship counts as every family that may have written it.
## 2. Grade
- `skip`: only docs, comments or copy; no code that runs and no agent
instructions.
- `single`: any other change bounded to one subsystem.
- `dual`: security, auth, permissions, payments, migrations, destructive data,
infrastructure, concurrency, public contracts, cross-subsystem changes,
ambiguous requirements, or unbounded impact.
When unsure, grade up. A grade the user gives is a floor. `skip` goes straight
to the receipt.
## 3. Review
`single`: one reviewer from a family that did not write the change. Take the
first such seat in the `interrogate reviewers` line of `pstack-models.md` and
resolve it with `t3-capacity`. The brief carries the absolute path of the
[review brief](references/review-brief.md), the worktree, the pinned range, the
intent and acceptance criteria, and the paths of any spec, issue and repo
instruction files.
`dual`: run `interrogate` on the pinned range with the same intent; its Act On
findings are the findings.
Staff every reviewer, `dual` seats and the final review included, through
`delegate_task` in runtime mode `full-access` with the read-only brief: a
headless run has nobody to approve it. A capacity fallback never lands on the
author's family; when no other family has capacity, report a blocker. Only the
user can waive the family rule, and the receipt then names the waiver; an
earlier model choice in the session waives nothing. Where `delegate_task` is
unavailable, as in a subagent (`parent_not_active`), hand the pinned range back
to the parent as a blocker.
A review counts once it returns a substantive verdict on the pinned HEAD; restaff
refusals, quota errors and empty results. A material finding or a `dual` risk
promotes `single` to `dual`.
## 4. Fix
Verify and deduplicate the findings, then apply the valid in-scope ones,
structural simplifications included, in one batch. Out-of-scope ideas become
follow-ups. New contracts, architecture changes or fixes that roughly double
the diff go to the user. Rerun the affected checks and commit.
When the fixes change behavior, scope, security or architecture, run one final
review: a new reviewer on the new HEAD with the prior findings, from a family
that wrote none of the reviewed code, fixes included. Apply, check and commit
its valid findings; anything needing another such change goes to the user.
## 5. Receipt
Return this line for `write-pr`'s Review section, plus any blocker and its next
step:
`**Review.** <skip | single | dual> by <models>; <n> fixed, <n> rejected; reviewed <short SHA>`