Skip to content
Back to skills

Adaptive Reviewer

ASecurity

Autonomously selects review protocols and dispatches nested subagents based on Spores finding severity.

  • 2 stars
  • 0 votes
  • 0 copies
  • 3 views
  • Added October 4, 2026
ai-agentsgotestingsecurity

Security analysis

A100/100

Scanned October 4, 2026

npx -y skills add nseney1/Soma-Governance --skill adaptive-reviewer --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Adaptive Reviewer?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Adaptive Reviewer
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/nseney1-adaptive-reviewer/badge)](https://www.skillsdirectory.com/skills/nseney1-adaptive-reviewer)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: Adaptive Review Orchestrator
description: Autonomously selects review protocols and dispatches nested subagents based on Spores finding severity.
trigger: user_request
---

# Adaptive Review Orchestrator

> **Role**: Autonomously execute review protocols by dispatching nested subagents. Eliminates manual protocol selection — the orchestrator starts with Spores and auto-escalates based on finding severity.

## Setup

At session start (or first review request), define the orchestrator:

```
define_subagent(
  name: "adaptive_reviewer",
  enable_subagent_tools: true,
  enable_write_tools: true,
  description: "Adaptive review orchestrator with auto-escalation"
)
```

Then invoke it:

```
invoke_subagent(
  type: "adaptive_reviewer",
  prompt: "Review [target files/directory]. Context: [what changed, why]"
)
```

The orchestrator handles everything internally and reports back with a structured synthesis.

## Auto-Escalation Logic

The orchestrator runs Spores first, then decides:

| Spores Result | Auto-Decision |
|:---|:---|
| 0 findings or all ℹ️ | **STOP as Gale** — synthesize and report |
| 1-3 ⚠️ warnings, 0 🔴 | **Roots only** — targeted fixes |
| Any 🔴 critical | **Full Trident** — Roots + Bedrock |
| 2+ 🔴 or security finding | **Maelstrom** — Roots + Thorns + Bedrock |
| Infra/auth/schema 🔴 | **Tempest** — + Mycelium + Mulch |
| Pre-release / user-requested | **Supercell** — 8 orthogonal prongs, adversarial pairs, iterative until clean |

## Supercell Protocol

Supercell applies the same adversarial information-partitioning principle as Layer 2 verification,
but to the review process itself.

### Cycle Structure
For each prong pair (e.g., Correctness + Portability):
1. **🔴 Prosecutor**: Reviews code with the goal of *finding every possible defect*. Incentivized to over-report.
2. **🟢 Defender**: Reviews the same code with the goal of *proving correctness*. Incentivized to disprove findings.
3. **⚖️ Arbiter** (orchestrator): Reconciles both reports. Only findings that survive the defense make the final cut.

### Why Adversarial?
- **Eliminates false positives**: A cooperative auditor can't catch its own over-reporting bias. A Defender filters noise (e.g., test fixture strings flagged as "hardcoded paths").
- **Eliminates false negatives**: A Prosecutor actively hunts for issues a cooperative auditor might rationalize away.
- **Information asymmetry**: Prosecutor sees code + tests, Defender sees code + docstrings/specs. Neither has full context — truth emerges from intersection.

### Iteration (No Deferrals)
1. **Review**: Fan out 8 orthogonal prongs (Cycle 1 may be cooperative for triage speed).
2. **Fix everything**: Address ALL findings — security, correctness, quality, elegance. Nothing is deferred. RCA each finding: what broke, how we missed it, antipattern candidate.
3. **Adversarial re-review**: Re-run affected prongs with Prosecutor/Defender pairs. New findings from fixes are treated the same — fix everything.
4. **Repeat** steps 2-3 until all 8 prongs return zero surviving findings in the same cycle.
5. **Ship**: Only when the full adversarial cycle is clean.

## Self-Healing

If Bedrock returns BLOCK:
1. Re-dispatch Roots on failed fixes with Bedrock's objections
2. Re-run Bedrock (max 1 retry)
3. If still BLOCK → report to parent

If Thorns breaks fixes:
1. Re-dispatch Roots with Thorns attack vectors as context
2. Continue to Bedrock with revised fixes

## Phase 0: Triage (No Subagent)

Before dispatching, the orchestrator inspects the target:
- `enzymes/**`, `Makefile`, `install*` → HIGH sensitivity (Security lens mandatory)
- `genome/*.md` (semantic) → MEDIUM (Compliance lens)
- `docs/**`, `README` → LOW (may stop at Gale)
- Read `governance/mulch_queue.jsonl` for known anti-patterns

## Subagent Rules

1. ALL prong subagents: `flash` model, `research` type (read-only)
2. Context Pre-Seed every prompt (~200 token header)
3. Orthogonal Persona Mandate: no two scouts share the same lens
4. Kill each subagent immediately after debrief
5. Max 12 dispatches (hard cap)

## Output Format

```markdown
# Adaptive Review — [Target]
## Protocol: [auto-selected] (escalated from Spores)
## Verdict: SHIP / BLOCK / REVISE

## 🔴 Critical Findings
## ⚠️ Warnings
## Proposed Fixes (post-Thorns if applicable)
## Stats (dispatches, prongs, wall-clock)
```

## Proven Results (E11 Testing)

| Metric | Manual Orchestration | Adaptive Orchestrator |
|:-------|:--------------------:|:---------------------:|
| Parent context consumed | ~6 turns per review | **1 turn** (dispatch + receive) |
| Protocol selection | Manual (user guesses) | **Empirical** (data-driven) |
| Thorns revision loop | Manual relay | **Autonomous** |
| Dispatches | Same count | Same count, 0 wasted |

## When NOT to Use

- **Breeze** (known single-file defect): Use `review_orchestrator` directly with Breeze mode — adaptive triage adds unnecessary overhead for known defects.
- **Post-mortem analysis**: Use standalone Spores — no fixes needed.
- **Live monitoring**: Use `session-monitor` skill instead.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.