review

Reviews pull request diffs against a base branch for structural issues before merging.

Updated Apr 5, 2026
One-click install
npx skills add https://github.com/VertaKhan/cs_gstack --skill review-vertakhan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/VertaKhan/cs_gstack/tree/main/.claude/skills/gstack/review
Command: npx skills add https://github.com/VertaKhan/cs_gstack --skill review-vertakhan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Code review before landing a PR often misses structural issues that tests don't catch, such as SQL injection risks, race conditions, LLM trust boundary violations, and scope drift from the original plan. This Skill automates a two-pass pre-landing review of your branch diff so critical problems surface before merge. ## Core Features & Use Cases - Two-Pass Diff Review: Runs a critical pass (SQL safety, race conditions, LLM output trust, enum completeness) and an informational pass (dead code, test gaps, performance, CI/CD) against the diff with the base branch. - Scope Drift & Plan Completion Audit: Compares the diff against TODOS.md, PR descriptions, and plan files to detect scope creep and missing requirements. - Greptile Comment Triage: Fetches, classifies, and replies to Greptile bot review comments with evidence-based responses and suppression history. - Fix-First Workflow: Auto-applies mechanical fixes (dead code, magic numbers, N+1 queries) and batches ambiguous findings into a single user question. - Use Case: Before merging a feature branch, run the review to catch a missing enum consumer in the backend, an unparameterized SQL query, and a plan item that was never implemented. ## Quick Start Ask the assistant to review this PR or check my diff against the base branch before merging.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a PR diff before merging?▼

Run the review workflow on your feature branch; it fetches the latest base branch, computes the full diff, and applies a two-pass checklist covering critical issues like SQL safety and race conditions plus informational findings like test gaps and dead code.

What issues does automated pre-landing code review catch?▼

It catches SQL injection via string interpolation, TOCTOU race conditions, unvalidated LLM output written to databases, incomplete enum handling across consumers, N+1 queries, XSS via unsafe HTML rendering, and scope drift from the stated plan.

Does this code review work with GitLab merge requests?▼

Yes, the workflow detects the hosting platform from the git remote URL and uses glab for GitLab or gh for GitHub, with a git-native fallback when neither CLI is authenticated.

Can the review auto-fix issues it finds?▼

Yes, mechanical fixes like dead code removal, magic number extraction, and missing eager loading are applied automatically. Riskier findings such as security issues, race conditions, and large fixes are batched into a single question for human judgment.

How does the review handle Greptile bot comments?▼

It fetches Greptile line-level and top-level PR comments, classifies each as valid, already fixed, false positive, or suppressed based on project history, then posts evidence-based replies using tiered templates.

What are the limitations of diff-based code review?▼

Most checks analyze only the diff, so issues in untouched code are missed except for enum completeness, which greps and reads consumer files outside the diff. It also requires a diff against the base branch and stops if none exists.