adversarial-reviewer

Reviews code adversarially to find bugs across logic, security, concurrency, and error handling categories.

1|Updated Apr 25, 2026
One-click install
npx skills add https://github.com/rczamor/rz-emdash --skill adversarial-reviewer-rczamor
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: adversarial-reviewer
Source: https://github.com/rczamor/rz-emdash/tree/main/skills/adversarial-reviewer
Command: npx skills add https://github.com/rczamor/rz-emdash --skill adversarial-reviewer-rczamor

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Standard code reviews often miss subtle bugs because reviewers give code the benefit of the doubt. This Skill forces a hostile review posture that assumes bugs exist and hunts for them with concrete triggers, catching logic errors, race conditions, and security flaws before they reach production. ## Core Features & Use Cases - Structured Bug Hunt: Works through seven ordered categories — logic errors, edge cases, error handling, state and concurrency, security, data integrity, and resource management. - Severity-Ranked Findings: Outputs each bug with file location, category, severity (CRITICAL to LOW), a concrete trigger scenario, and a minimal fix. - Use Case: Before merging a pull request that touches payment logic, ask for an adversarial review to surface off-by-one errors, swallowed exceptions, and unsanitized inputs with proof-of-concept triggers. ## Quick Start Review the code in this pull request adversarially and report every bug you find with severity and a concrete trigger.

Frequently Asked Questions about adversarial-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I get a thorough code review that finds real bugs?▼

Request an adversarial review that assumes the code is broken and hunts for proof. The reviewer works through logic errors, edge cases, error handling, concurrency, security, data integrity, and resource management, reporting each bug with a concrete trigger scenario.

What kinds of bugs does adversarial code review catch?▼

It catches off-by-one errors, inverted conditions, swallowed exceptions, race conditions, stale closures, unsanitized input reaching SQL or shell, missing authorization checks, partial writes without transactions, and unbounded resource growth.

How are code review findings ranked by severity?▼

Findings are ranked CRITICAL (data loss, security vulnerability, production crash), HIGH (wrong behavior in normal usage), MEDIUM (edge-case failures, leaks under load), and LOW (cosmetic logic issues), ordered CRITICAL first.

When should I not use adversarial code review?▼

Avoid it for style feedback, naming conventions, feature suggestions, or refactoring advice — it explicitly excludes those. Use it when you need correctness auditing, not general code quality or design guidance.

Can adversarial review replace automated testing?▼

No. It complements testing by constructing concrete failure scenarios a human or AI can reason about, but it does not execute code. Combine it with unit and integration tests for verification coverage.