review

Reviews pull request diffs for SQL safety, LLM trust boundaries, and structural issues.

Updated May 15, 2026
One-click install
npx skills add https://github.com/tgmarinho/canetaco --skill review-tgmarinho
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/tgmarinho/canetaco/tree/main/.claude/skills/review
Command: npx skills add https://github.com/tgmarinho/canetaco --skill review-tgmarinho

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Catching structural defects before code lands is hard under time pressure. This Skill performs a pre-landing review of your diff against the base branch, flagging SQL safety risks, LLM trust boundary violations, conditional side effects, and other structural problems before they reach production. ## Core Features & Use Cases - Pre-landing PR review: Analyzes the diff against the base branch for SQL safety, LLM trust boundary violations, and conditional side effects. - Structured decision workflow: Uses AskUserQuestion decision briefs with recommendations, tradeoffs, and completeness scoring to resolve review findings. - Session context recovery: Loads prior review history, checkpoints, and learnings so repeat reviews build on past findings. - Use Case: Before merging a feature branch, ask for a review of your diff. The Skill inspects the changes, flags unsafe SQL or prompt-injection-prone LLM boundaries, and walks you through each finding with a recommended fix. ## Quick Start Ask the assistant to review this PR against the base branch before merging.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a PR diff before merging?▼

Invoke the review skill with a request like "review this PR" or "check my diff". It compares your branch against the base branch and flags SQL safety issues, LLM trust boundary violations, and conditional side effects with recommended fixes.

What does a pre-landing code review check for?▼

It checks the diff for SQL safety problems, LLM trust boundary violations where untrusted input reaches prompts, conditional side effects, and other structural issues. Each finding is presented as a decision brief with a recommendation and tradeoffs.

Can this review skill run in plan mode?▼

Yes. The skill defines plan-mode-safe operations and treats its file as executable instructions during plan mode. AskUserQuestion gates satisfy plan mode's end-of-turn requirement, and ExitPlanMode is called only after the workflow completes.

Why is the review skill blocked with an AskUserQuestion error?▼

The skill requires an AskUserQuestion tool variant, either a host MCP version or the native Claude Code tool. If neither is available in your tool list, the skill stops and reports BLOCKED rather than auto-deciding on your behalf.

Does the review skill work without the gstack toolchain installed?▼

The preamble expects gstack binaries under ~/.claude/skills/gstack/bin for config, telemetry, and learnings. Most calls fail gracefully with fallbacks, but the full workflow assumes the gstack installation is present.