adversarial-reviewer

Reviews code changes through three hostile personas that must each report at least one finding.

2|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/BryanPinheiro77/FinanceBot-BackEnd --skill adversarial-reviewer-bryanpinheiro77
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: adversarial-reviewer
Source: https://github.com/BryanPinheiro77/FinanceBot-BackEnd/tree/main/.agents/skills/adversarial-reviewer
Command: npx skills add https://github.com/BryanPinheiro77/FinanceBot-BackEnd --skill adversarial-reviewer-bryanpinheiro77

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Self-reviewing code shares the author's mental model and blind spots, producing rubber-stamp approvals on changes a fresh reviewer would flag. This Skill forces genuine perspective shifts so critical bugs, maintainability issues, and security vulnerabilities surface before merge. ## Core Features & Use Cases - Three adversarial personas: The Saboteur hunts production-breaking edge cases, the New Hire flags maintainability and clarity problems, and the Security Auditor applies an OWASP-informed checklist. - Mandatory findings with severity promotion: Each persona must report at least one issue, and findings caught by 2+ personas are promoted one severity level (NOTE to WARNING to CRITICAL). - Structured verdicts: Every review ends with a BLOCK, CONCERNS, or CLEAN verdict plus deduplicated, severity-ranked findings. - Use Case: Before merging a self-authored PR touching authentication code, run an adversarial review on the diff to catch a missing null check and an unvalidated input that a same-model review would have approved. ## Quick Start Ask the AI to run an adversarial review on your staged changes or a specific diff such as the last three commits before merging your pull request.

Frequently Asked Questions about adversarial-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my own code changes before merging a PR?▼

Run an adversarial review on your staged or unstaged git diff, or target a range like the last three commits. The review applies three hostile personas that each must report at least one finding, ending with a BLOCK, CONCERNS, or CLEAN verdict.

What is adversarial code review and how does it work?▼

Adversarial code review forces the reviewer into hostile personas such as a saboteur, a new hire, and a security auditor. Each persona has distinct priorities and must surface at least one issue, which prevents rubber-stamp approvals caused by shared mental models.

Can I review a specific file instead of a git diff?▼

Yes, you can target a single file path instead of a diff. The review then focuses on the full file rather than only changed lines, since bugs often live in the interaction between new and existing code.

Does adversarial review cover security vulnerabilities?▼

Yes, the Security Auditor persona applies an OWASP-informed checklist covering injection, broken authentication, data exposure, insecure defaults, missing access control, dependency risk, and hardcoded secrets across every trust boundary in the change.

When should I not rely on adversarial review alone?▼

Adversarial review is prompt-based analysis without execution, so it cannot replace running tests, dynamic analysis, or human review for high-stakes changes. Treat its findings as a structured second opinion, not a guarantee of correctness.