when-reviewing-pull-request-orchestrate-comprehensive-code-review
Orchestrates a comprehensive code review process using specialized agents to ensure quality across multiple dimensions in a systematic workflow.
Install this skill
Security score
The when-reviewing-pull-request-orchestrate-comprehensive-code-review skill was audited on May 23, 2026 and we found 50 security issues across 3 threat categories, including 18 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 87 | ```bash |
Template literal with variable interpolation in command context
| 104 | ```bash |
Template literal with variable interpolation in command context
| 135 | **Memory Pattern**: `code-review/${PR_ID}/phase-1/code-analyzer/lint-results` |
Template literal with variable interpolation in command context
| 156 | **Memory Pattern**: `code-review/${PR_ID}/phase-1/tester/test-results` |
Template literal with variable interpolation in command context
| 173 | **Memory Pattern**: `code-review/${PR_ID}/phase-1/qa-engineer/coverage-report` |
Template literal with variable interpolation in command context
| 190 | **Memory Pattern**: `code-review/${PR_ID}/phase-1/code-analyzer/build-status` |
Template literal with variable interpolation in command context
| 193 | ```bash |
Template literal with variable interpolation in command context
| 214 | await memory_store(`code-review/${PR_ID}/phase-1/automated-feedback`); |
Template literal with variable interpolation in command context
| 286 | **Memory Pattern**: `code-review/${PR_ID}/phase-2/code-analyzer/quality-review` |
Template literal with variable interpolation in command context
| 328 | **Memory Pattern**: `code-review/${PR_ID}/phase-2/security-manager/security-review` |
Template literal with variable interpolation in command context
| 362 | **Memory Pattern**: `code-review/${PR_ID}/phase-2/performance-analyzer/performance-review` |
Template literal with variable interpolation in command context
| 395 | **Memory Pattern**: `code-review/${PR_ID}/phase-2/system-architect/architecture-review` |
Template literal with variable interpolation in command context
| 427 | **Memory Pattern**: `code-review/${PR_ID}/phase-2/api-documentation-specialist/docs-review` |
Template literal with variable interpolation in command context
| 439 | ```bash |
Template literal with variable interpolation in command context
| 458 | ```bash |
Template literal with variable interpolation in command context
| 506 | **Memory Pattern**: `code-review/${PR_ID}/phase-3/tester/integration-tests` |
Template literal with variable interpolation in command context
| 509 | ```bash |
Template literal with variable interpolation in command context
| 533 | **Memory Pattern**: `code-review/${PR_ID}/phase-3/devops-engineer/deployment-impact` |
Template literal with variable interpolation in command context
| 558 | **Memory Pattern**: `code-review/${PR_ID}/phase-3/product-manager/user-impact` |
Template literal with variable interpolation in command context
| 561 | ```bash |
Template literal with variable interpolation in command context
| 587 | **Memory Pattern**: `code-review/${PR_ID}/phase-3/code-reviewer/risk-analysis` |
Template literal with variable interpolation in command context
| 612 | ```bash |
Template literal with variable interpolation in command context
| 620 | ```markdown |
Template literal with variable interpolation in command context
| 662 | ```bash |
Template literal with variable interpolation in command context
| 686 | message: `${blocking.length} blocking issue(s) must be fixed before merge.` |
Template literal with variable interpolation in command context
| 694 | message: `Approved with ${highPriority.length} recommendations to address before or after merge.` |
Template literal with variable interpolation in command context
| 769 | ```bash |
Template literal with variable interpolation in command context
| 779 | ```bash |
Template literal with variable interpolation in command context
| 791 | ```bash |
Template literal with variable interpolation in command context
| 806 | ```bash |
Template literal with variable interpolation in command context
| 818 | ```bash |
Template literal with variable interpolation in command context
| 857 | ```bash |
Template literal with variable interpolation in command context
| 869 | ```bash |
Template literal with variable interpolation in command context
| 878 | ```bash |
Template literal with variable interpolation in command context
| 891 | ```bash |
Template literal with variable interpolation in command context
| 916 | ```bash |
Template literal with variable interpolation in command context
| 981 | ```bash |
Template literal with variable interpolation in command context
| 1059 | ```bash |
Template literal with variable interpolation in command context
| 1086 | ```bash |
Template literal with variable interpolation in command context
| 1118 | ```bash |
Template literal with variable interpolation in command context
| 1170 | - [ ] `code-review/${PR_ID}/metadata` - PR information |
Template literal with variable interpolation in command context
| 1171 | - [ ] `code-review/${PR_ID}/phase-1/*` - Automated check results |
Template literal with variable interpolation in command context
| 1172 | - [ ] `code-review/${PR_ID}/phase-2/*` - Specialist review findings |
Template literal with variable interpolation in command context
| 1173 | - [ ] `code-review/${PR_ID}/phase-3/*` - Integration analysis |
Template literal with variable interpolation in command context
| 1174 | - [ ] `code-review/${PR_ID}/phase-4/final-summary` - Comprehensive report |
Webhook reference - potential data exfiltration
| 416 | "file": "src/api/webhooks.ts", |
Webhook reference - potential data exfiltration
| 417 | "issue": "New webhook endpoint /api/webhooks/stripe missing API documentation", |
Webhook reference - potential data exfiltration
| 648 | 4. [MEDIUM/DOCUMENTATION] Add API documentation for webhook endpoint |
Webhook reference - potential data exfiltration
| 751 | - Add JSDoc for webhook endpoint |
Access to .env file
| 318 | "suggestion": "Move to environment variables and add to .env.example" |