review

Run the review skill against your git diff to analyze changed files across naming, UI accessibility, and security. It detects changed files automatically via git diff when no argument is given, then outputs severity-ranked findings with fix suggestions.

It detects hardcoded secrets, missing input validation, SQL and OS command injection, XSS via unsafe HTML insertion, missing authentication middleware, error stack leakage, and vulnerable dependencies via pnpm audit. Findings are classified as Critical, Major, or Minor.

No, the UI check only runs when changed files include UI components such as .tsx, .jsx, .vue, or .svelte files. If no UI files changed, the step is skipped and the skip is explicitly noted in the summary.

It is a naming maturity ladder from Missing and Nonsense through Honest, Honest and Complete, Does the Right Thing, Intent, and Domain Abstraction. Reviewers classify each identifier and propose incremental improvements rather than jumping to a final name.

No, the skill is review-only and never edits code. It outputs problems, reasons, and suggested fixes, and when Critical security findings exist it blocks subsequent implementation steps until you decide how to proceed.