review-pr — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited review-pr (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run a comprehensive code review using multiple specialized agents, each focusing on a different aspect of code quality, as a paired-session report mode run (Step 0).
A repository with submodules cannot be reviewed in report mode yet.
Review Aspects (optional): "$ARGUMENTS"
Resolve entry in .review-loop/config.md (exact values legacy and paired-session): legacy is refused with review-pr: the legacy workflow was removed in v2.13.0; remove "entry: legacy" from .review-loop/config.md (paired-session is the only entry); an invalid value prints review-pr: entry "<v>" is not valid (paired-session is the only entry); using paired-session, a duplicate key or an unreadable config prints review-pr: entry could not be read (<reason>); using paired-session, and both continue as absent. Then:
--legacy in $ARGUMENTS: refused with review-pr: the legacy workflow was removed in v2.13.0; run /review-loop:review-pr without --legacy (report mode).uname -s is not Darwin): refused with review-pr: paired-session needs macOS; Linux and other hosts are not supported.review-pr: paired-session report mode (entry set in .review-loop/config.md) when the key is set, or review-pr: paired-session report mode (the default entry) when it is absent. Invoke the paired-session skill with --review-pr and the remaining arguments (input and aspects), and end this skill. It follows the shared contract's Review-PR entry: a PR or ref is reviewed in a temporary clone, no tests run unless you confirm a test command, the result is review-report.md, and nothing is posted unless you ask.
simplify is refused there before any coordinator command, with the pointerrun /review-loop:code-quality-loop on the change (its POLISH-Q simplifier).
stage A failure: <reason>, reportreview-pr: paired-session entry refused (<reason>) and stop (nothing falls back).
Default route (paired-session report mode; `entry` absent or `paired-session`, see Step 0):
/review-loop:review-pr 123
# Reviews PR #123 of this repository in a temporary clone; writes review-report.md, posts nothing
/review-loop:review-pr https://github.com/owner/repo/pull/123 code tests
# Only the code and tests specialists (the reviewer, shadow, gate and security stage always run)code-reviewer:
silent-failure-hunter:
comment-analyzer:
type-design-analyzer:
pr-test-analyzer:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.