review
Analyzes pull requests for SQL safety and structural issues, ensuring code quality before merging.
Install this skill
Security score
The review skill was audited on Jun 5, 2026 and we found 18 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 24 | _UPD=$(~/.claude/skills/chief/bin/chief-update-check 2>/dev/null || .claude/skills/chief/bin/chief-update-check 2>/dev/null || true) |
Access to hidden dotfiles in home directory
| 26 | mkdir -p ~/.chief/sessions |
Access to hidden dotfiles in home directory
| 27 | touch ~/.chief/sessions/"$PPID" |
Access to hidden dotfiles in home directory
| 28 | _SESSIONS=$(find ~/.chief/sessions -mmin -120 -type f 2>/dev/null | wc -l | tr -d ' ') |
Access to hidden dotfiles in home directory
| 29 | find ~/.chief/sessions -mmin +120 -type f -delete 2>/dev/null || true |
Access to hidden dotfiles in home directory
| 30 | _CONTRIB=$(~/.claude/skills/chief/bin/chief-config get chief_contributor 2>/dev/null || true) |
Access to hidden dotfiles in home directory
| 31 | _PROACTIVE=$(~/.claude/skills/chief/bin/chief-config get proactive 2>/dev/null || echo "true") |
Access to hidden dotfiles in home directory
| 35 | _LAKE_SEEN=$([ -f ~/.chief/.completeness-intro-seen ] && echo "yes" || echo "no") |
Access to hidden dotfiles in home directory
| 37 | mkdir -p ~/.chief/analytics |
Access to hidden dotfiles in home directory
| 38 | echo '{"skill":"review","ts":"'$(date -u +%Y-%m-%dT%H:%M:%SZ)'","repo":"'$(basename "$(git rev-parse --show-toplevel 2>/dev/null)" 2>/dev/null || echo "unknown")'"}' >> ~/.chief/analytics/skill-usage |
Access to hidden dotfiles in home directory
| 44 | If output shows `UPGRADE_AVAILABLE <old> <new>`: read `~/.claude/skills/chief/chief-upgrade/SKILL.md` and follow the "Inline upgrade flow" (auto-upgrade if configured, otherwise AskUserQuestion with 4 |
Access to hidden dotfiles in home directory
| 53 | touch ~/.chief/.completeness-intro-seen |
Access to hidden dotfiles in home directory
| 105 | **To file:** write `~/.chief/contributor-logs/{slug}.md` with **all sections below** (do not truncate — include every section through the Date/Version footer): |
Access to hidden dotfiles in home directory
| 274 | source <(~/.claude/skills/chief/bin/chief-diff-scope <base> 2>/dev/null) |
Access to hidden dotfiles in home directory
| 297 | ~/.claude/skills/chief/bin/chief-review-log '{"skill":"design-review-lite","timestamp":"TIMESTAMP","status":"STATUS","findings":N,"auto_fixed":M,"commit":"COMMIT"}' |
Access to hidden dotfiles in home directory
| 454 | ~/.claude/skills/chief/bin/chief-review-log '{"skill":"codex-review","timestamp":"'"$(date -u +%Y-%m-%dT%H:%M:%SZ)"'","status":"STATUS","gate":"GATE"}' |
External URL reference
| 48 | thing when AI makes the marginal cost near-zero. Read more: https://garryslist.org/posts/boil-the-ocean" |
External URL reference
| 52 | open https://garryslist.org/posts/boil-the-ocean |