writing-review-packets — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited writing-review-packets (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when drafting packet markdown for reviews push --packet. A good packet is a reviewer map: it groups related hunks, explains why to look, and avoids rephrasing the diff line-by-line.
Use one top-level title and ## packet sections:
# Packet Title
Short overview of what the review packet covers.
## Section Title
The first paragraph is the section overview. Use it to explain the reasoning behind this part of the changeset: what problem this section solves, why the files belong together, and what judgment the reviewer should bring to the code. It can be a full paragraph when the change needs that context.
Context before a hunk should connect the local code to that section overview. It can be a short paragraph when useful, especially when the surrounding code shape, dependency order, risk, or intended reviewer attention would otherwise be unclear.
@hunk path/to/file.ex#1Rules:
# title.## for review packet sections.@hunk path#N.git diff or the intended CLI range.## section. This first paragraph is the primary guide-rail content, so it should explain why the grouped changes exist and how to review them.### subheadings sparingly, only when a section truly needs scan landmarks; do not add a stock technical-overview subsection to every section.Treat each ## section as an approval unit. A reviewer should be able to approve the section without implicitly approving unrelated risks.
Shape sections around independent review decisions, not just file adjacency. Split a section when it mixes substantial concerns such as:
As a rough check, reconsider any section with more than 10-15 hunks, 300-400 changed lines, or 10 files. Large sections are fine only when the hunks are mechanically inseparable or share one clear approval meaning.
Avoid catch-all sections such as "Supporting integration" unless every hunk in the section supports the same review decision. Prefer moving glue files into the section that owns their risk.
When the best structure is unclear, ask the user which organization practice they prefer before finalizing or pushing the packet. Ask when you lack confidence about tradeoffs such as:
Keep the question short and offer concrete options. If the user is unavailable and the packet must proceed, state the assumption in the packet overview and choose the structure that makes approvals most independent.
Lead-ins should orient the reviewer to the code they are about to see, not announce the file path or repeat the section title. Keep them short enough to fit in about two tablet lines: aim for 16-28 words, one sentence when possible.
Before writing a lead-in, skim the surrounding module, schema, caller, or template so you can name context that may not appear inside the hunk. Good lead-ins usually include:
Avoid boilerplate like:
Review lib/reviews/accounts.ex for the identity data model and authorship changes.Prefer contextual lead-ins:
Accounts owns the split between GitHub owners and acting identities. Watch token minting and lookup paths for owner-vs-actor drift.
This migration bridges old user-authored rows to identity-authored rows. The risky parts are backfill order and FK delete behavior.
Settings is becoming the account control surface. Keep signed-out, human identity, agent identity, and one-time-token states easy to scan.When several adjacent hunks in the same file are mechanical or serve the same purpose, write one lead-in before the run of hunk refs instead of repeating a line before every hunk.
/private/tmp or another temporary path to avoid accidentally committing it.Before pushing, audit the packet:
Section approvals inherit across patchsets only when the packet section identity and refs still match well enough.
To preserve approvals:
To intentionally invalidate approvals:
Use the CLI from the git checkout being reviewed:
reviews push --packet /path/to/packet.md
reviews push --update <slug> --packet /path/to/packet.md
reviews push --update <slug> --range HEAD --packet /path/to/packet.mdNotes:
--range HEAD captures current working-tree changes.HEAD~1..HEAD; use an explicit range when needed.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.