Install
$ agentstack add skill-dgk-dev-dgk-gpt-rrr ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
/rrr
Use glm-review --model glm-5 as the deeper paid review pass, then validate the results against the code before you trust them.
Default Flow
- Determine the exact review scope first.
- commit hash known -> commit mode
staged-> staged modepr-> PR mode- mixed unrelated local changes -> focused diff file
- Run a health check only when auth or connectivity looks questionable:
glm-review --model glm-5 --health
- Run the review with the smallest correct input:
glm-review --model glm-5
glm-review --model glm-5 --mode staged
glm-review --model glm-5 --mode pr
glm-review --model glm-5 --mode commit --ref
glm-review --model glm-5 --diff-file /tmp/glm-review-diff.patch
- Verify every reported issue in the actual code and diff.
- Keep only confirmed issues.
- If fixes are requested or clearly in scope, apply them and rerun the closest verification.
Choosing Review Input
- committed single change:
glm-review --model glm-5 --mode commit --ref
- committed subset of files:
glm-review --model glm-5 --mode commit --ref --files src/a.ts src/b.ts
- custom focused diff:
GIT_ROOT=$(git rev-parse --show-toplevel)
cd "$GIT_ROOT" && git diff HEAD -- ... > /tmp/glm-review-diff.patch
glm-review --model glm-5 --diff-file /tmp/glm-review-diff.patch
If the diff is empty, stop and say there is nothing to review.
Validation Rules
glm-reviewis a reviewer, not an oracle.- Re-check referenced code paths before reporting a bug.
- Separate confirmed defects from debatable style feedback.
- If a finding depends on broader context, inspect the relevant surrounding code before accepting it.
Error Handling
command not found: glm-review
Install it with npm install -g glm-review
ZAI_API_KEY not set
Export ZAI_API_KEY in the shell or your normal secret-loading path
- auth or API failure
Re-run glm-review --model glm-5 --health after refreshing credentials
Finish
Return:
- review scope used
- confirmed findings only
- notable false positives filtered out
- what verification ran after fixes, if any
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: dgk-dev
- Source: dgk-dev/dgk-gpt
- License: MIT
- Homepage: https://github.com/dgk-dev/dgk-gpt#readme
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.