requesting-code-review

Run a pre-commit verification pipeline on the staged diff from git diff --cached. It scans added lines for security issues, runs tests and linters against a pre-change baseline, and dispatches an independent reviewer before allowing the commit.

Grep added lines in the staged diff for patterns like api_key, secret, password, or token assignments, plus os.system, subprocess shell=True, eval, exec, pickle.loads, and string-formatted SQL queries. Any match is treated as a blocking security concern.

Pre-commit review verifies your own uncommitted changes locally before they land in git history. GitHub PR review examines other people's pull requests with inline comments after the code is already pushed.

Yes, it auto-detects the project language and runs the appropriate tools: pytest, ruff, and mypy for Python; npm test, eslint, and tsc for Node; cargo test and clippy for Rust; go test and go vet for Go. Missing tools are skipped silently.

Python versions before 3.12 cannot reuse the same quote character in nested f-strings, so ruff flags it as invalid-syntax. The fix is to extract the inner f-string into a variable before embedding it in the outer f-string; ruff cannot auto-fix this.

The pipeline allows a maximum of two fix-and-reverify cycles using a separate fix agent. If issues remain after both attempts, it escalates to the user with the remaining problems and suggests git stash or git reset to undo the changes.