Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

Back to skills

Review

ASecurity

Paranoid pre-landing code review. Reads git diff, runs two-pass analysis (CRITICAL blocks PR, INFORMATIONAL goes in body), surfaces issues with file:line references. Use when reviewing code before creating a PR, after finishing implementation, or when asked to review changes.

85 stars
0 votes
0 copies
1 views
Added 9/19/2026
code-qualitygobashgitsecurity

Security Analysis

A100/100

Scanned 9/19/2026

Install to Claude Code

$npx -y skills add indigoai-us/hq-core --skill review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Review?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/indigoai-us-review/badge)](https://www.skillsdirectory.com/skills/indigoai-us-review)

More formats (shields.io, HTML) on the badges page.

Download Zip
Files
SKILL.md
---
name: review
description: Paranoid pre-landing code review. Reads git diff, runs two-pass analysis (CRITICAL blocks PR, INFORMATIONAL goes in body), surfaces issues with file:line references. Use when reviewing code before creating a PR, after finishing implementation, or when asked to review changes.
allowed-tools: Read, Grep, Glob, Bash(git:*), AskUserQuestion, Task
---

# Pre-Landing Code Review

Semantic code review that reads the diff and reasons about correctness, security, and edge cases. Complements `/quality-gate` (mechanical checks) — run both before opening the pull request.

## Process

```
VALIDATE BRANCH → LOAD CHECKLIST → GET DIFF → TWO-PASS ANALYSIS → REPORT
```

### Step 1: Branch Validation

Confirm you're not on main and have changes to review.

```bash
git rev-parse --abbrev-ref HEAD   # must not be main/master
git diff origin/main --stat       # must have changes
```

If on main or no changes: stop and tell user.

### Step 2: Load Checklist

Check for repo-local override first, fall back to shared default:

1. Detect repo root: `git rev-parse --show-toplevel`
2. Check: `{repo}/.claude/review-checklist.md` — if exists, use it
3. Fallback: `.claude/skills/review/checklist.md` (this skill's default)

If no checklist found: stop — review requires a checklist to operate.

### Step 3: Retrieve Diff

```bash
git fetch origin main 2>/dev/null
git diff origin/main
```

Read the FULL diff before flagging anything. Issues already addressed within the diff are not issues.

### Step 4: Two-Pass Analysis

Run the checklist categories against the diff:

- **Pass 1 (CRITICAL)** — blocking issues. These must be resolved before PR creation.
- **Pass 2 (INFORMATIONAL)** — non-blocking issues. Included in PR body for reviewer awareness.

For each finding:
- Cite `file:line` precisely
- One line describing the problem
- One line with the fix
- No preamble, no "looks good overall," no filler

### Step 5: Report & Interact

**Output format:**

```
Pre-Landing Review: N issues (X critical, Y informational)

CRITICAL (blocking):
- [file:line] Problem description
  Fix: suggested fix

INFORMATIONAL (non-blocking):
- [file:line] Problem description
  Fix: suggested fix
```

If no issues: `Pre-Landing Review: No issues found.`

**For each CRITICAL finding:** present one at a time via AskUserQuestion with three options:
- A) Fix now — apply the suggested fix
- B) Acknowledge — proceed despite the issue (user accepts risk)
- C) False positive — suppress in future reviews

One issue per question. Never batch. Recommend which option and why.

**After all critical issues resolved:** list informational findings in a single block. Suggest including them in the PR description.

## Rules

- **Read-only default.** No file modifications unless user explicitly approves a fix.
- **Exhaustive reporting.** Surface all findings — do not quietly skip issues.
- **No premature action.** Never commit, push, or create PRs.
- **Context-aware.** Read the FULL diff before commenting. Don't flag issues already fixed within the diff.
- **Terse.** One-line problems, one-line fixes. No summaries, no preamble.
- **Checklist-driven.** Only flag categories defined in the loaded checklist.

## Integration

After review completes with no unresolved critical issues:
- Suggest running `/quality-gate` for mechanical checks (types, lint, tests)
- Suggest opening the pull request (`gh pr create -R {owner}/{repo} ...`), then
  `/land` to take that one PR through CI and merge, or `/ship` to run the full
  review → land → deploy → smoke → monitor pipeline

Attribution

indigoai-usindigoai-us
View sourceMore from indigoai-us →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman Review

Ultra-compressed code review comments. Cuts noise from PR feedback while preserving the actionable signal. Each comment is one line: location, problem, fix. Use when user says "review this PR", "code review", "review the diff", "/review", or invokes /caveman-review. Auto-triggers when reviewing pull requests.

1066601 votes

Caveman Commit

Ultra-compressed commit message generator. Cuts noise from commit messages while preserving intent and reasoning. Conventional Commits format. Subject ≤50 chars, body only when "why" isn't obvious. Use when user says "write a commit", "commit message", "generate commit", "/commit", or invokes /caveman-commit. Auto-triggers when staging changes.

1066601 votes

Verification Loop

一个全面的 Claude Code 会话验证系统。

2456590 votes

Springboot Verification

Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.

2456590 votes

Django Verification

Verification loop for Django projects: migrations, linting, tests with coverage, security scans, and deployment readiness checks before release or PR.

2456590 votes
View all in code-quality →