review-elixir — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited review-elixir (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
--parallel: If the agent supports subagents, dispatch one specialized subagent per technology area (otherwise reviews run sequentially with identical output)Complete in order before writing Issues in the output (empty scope is allowed; fabricated findings are not).
.ex/.exs/.heex paths under review (from Step 1 or user path). Pass: List printed or "No Elixir files in scope" — then stop with no Issues..credo.exs). Pass: You do not report a style issue that already passes the project's formatter/linter for that line.FILE:LINE (full surrounding context, not only the diff hunk). Pass: The Issue description matches observable code at that location.git diff --name-only $(git merge-base HEAD main)..HEAD | grep -E '\.ex$|\.exs$|\.heex$'CRITICAL: Run project linters BEFORE flagging any style issues.
# Check formatting
mix format --check-formatted
# Check Credo if present
if [ -f ".credo.exs" ] || grep -q ":credo" mix.exs 2>/dev/null; then
mix credo --strict
fi
# Check Dialyzer if configured
if grep -q ":dialyxir" mix.exs 2>/dev/null; then
mix dialyzer --format short
fiRules:
# Detect Phoenix
grep -r "use Phoenix\|Phoenix.Router\|Phoenix.Controller" --include="*.ex" -l | head -3
# Detect LiveView
grep -r "use Phoenix.LiveView\|Phoenix.LiveComponent\|~H" --include="*.ex" -l | head -3
# Detect Oban
grep -r "use Oban.Worker\|Oban.insert" --include="*.ex" -l | head -3
# Check for test files
git diff --name-only $(git merge-base HEAD main)..HEAD | grep -E '_test\.exs$'Load the review-verification-protocol skill and keep its checklist in mind throughout the review.
Load each applicable skill below (read its SKILL.md and apply its rules).
Always load:
Conditionally load based on detection:
| Condition | Skill |
|---|---|
| Phoenix detected | phoenix-code-review |
| LiveView detected | liveview-code-review |
| Performance focus requested | elixir-performance-review |
| Security focus requested | elixir-security-review |
| Test files changed | exunit-code-review |
If the agent supports subagents (and --parallel is set), dispatch one subagent per technology area in parallel; otherwise run sequentially. Both paths produce identical output.
Sequential (default):
Parallel (when subagents are available and `--parallel` is set):
Satisfy Hard gates items 2–4 before finalizing Issues. Before reporting any issue:
You MUST report ALL issues across ALL categories (style, logic, types, tests, security, performance) in a single review pass. Do not hold back issues for later rounds.
Before submitting findings, ask yourself:
If yes to either: include those anticipated downstream issues NOW, in this review, so the author can address everything at once.
Fixes to existing code should be flagged at their real severity regardless of size.
However, requests for net-new code that didn't exist before the diff must be classified as Informational:
These are improvement suggestions for the author to consider in future work, not review blockers.
If this is a re-review after fixes were applied:
## Review Summary
[1-2 sentence overview of findings]
## Issues
### Critical (Blocking)
1. [FILE:LINE] ISSUE_TITLE
- Issue: Description of what's wrong
- Why: Why this matters (bug, type safety, security)
- Fix: Specific recommended fix
### Major (Should Fix)
2. [FILE:LINE] ISSUE_TITLE
- Issue: ...
- Why: ...
- Fix: ...
### Minor (Nice to Have)
N. [FILE:LINE] ISSUE_TITLE
- Issue: ...
- Why: ...
- Fix: ...
### Informational (For Awareness)
N. [FILE:LINE] SUGGESTION_TITLE
- Suggestion: ...
- Rationale: ...
## Good Patterns
- [FILE:LINE] Pattern description (preserve this)
## Verdict
Ready: Yes | No | With fixes 1-N (Critical/Major only; Minor items are acceptable)
Rationale: [1-2 sentences]After fixes are applied, run the same checks as Step 2, then tests:
mix format --check-formatted
if [ -f ".credo.exs" ] || grep -q ":credo" mix.exs 2>/dev/null; then
mix credo --strict
fi
if grep -q ":dialyxir" mix.exs 2>/dev/null; then
mix dialyzer --format short
fi
mix testAll invoked checks must pass before approval.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.