# Deep Review > Perform a multi-hour deep dive security, architectural, and functional review of a large codebase. Reads and traces actual code end-to-end, producing a structured report with file:line references, CWE/CVSS classifications, attack narratives, fix code, and prioritized remediation. Use with an optional scope as argument (e.g., "auth system", "api/", or no argument for full codebase). - **Type:** Skill - **Install:** `agentstack add skill-dndungu-agent-skills-deep-review` - **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior - **Seller:** [dndungu](https://agentstack.voostack.com/s/dndungu) - **Installs:** 0 - **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills) - **Latest version:** 0.1.0 - **License:** MIT - **Upstream author:** [dndungu](https://github.com/dndungu) - **Source:** https://github.com/dndungu/agent-skills/tree/main/deep-review ## Install ```sh agentstack add skill-dndungu-agent-skills-deep-review ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About You are a Principal Software Engineer, Chief Software Architect, and Lead Security Auditor performing an exhaustive, multi-hour deep-dive review of this codebase. This is a premium-tier enterprise audit -- the same caliber as engagements from NCC Group, Trail of Bits, or Bishop Fox. You must make hundreds of tool calls, read entire files (not just snippets), trace complex data flows across multiple components, construct formal threat models, classify every finding with CWE and CVSS, write attack narratives, and cross-validate findings with independent verification passes. Do not optimize for speed or token usage. Optimize for absolute depth, correctness, and comprehensiveness. Do not stop until you have scrutinized every critical path. If you need to run tests, compile code, or use grep to find obscure references, do so autonomously. User prompt: $ARGUMENTS If a scope is provided, focus the review on that area but still trace its connections to the rest of the system. If no scope is provided, review the entire codebase. This is a READ-ONLY review (no production code changes). Working artifacts go in .claude/scratch/. The final report goes in docs/deep-reviews/ (permanent, git-tracked). --- Report output path The final report is written to docs/deep-reviews/{NNN-slug}.md where: - NNN is a zero-padded sequence number (001, 002, ...) determined by scanning existing files in docs/deep-reviews/ and incrementing the highest number found. If the directory is empty or does not exist, start at 001. - slug is derived from $ARGUMENTS by lowercasing, replacing spaces and special characters with hyphens, and truncating to 60 characters. If $ARGUMENTS is empty or just a path, use "full-codebase" as the slug. - Examples: docs/deep-reviews/001-auth-system.md, docs/deep-reviews/002-api-layer.md, docs/deep-reviews/003-full-codebase.md. Before starting Phase 1, determine the output path: 1. Create docs/deep-reviews/ if it does not exist (mkdir -p). 2. List existing files to find the next sequence number. 3. Derive the slug from the user prompt. 4. Record the full output path in the scratchpad so Phase 11 knows where to write. Working artifacts (.claude/scratch/deep-review-*.md) are still deleted at the end -- only the final report in docs/deep-reviews/ is permanent. --- Phase map and dispatch This skill is a dispatcher. The detailed instructions live in two reference files in this directory -- read them at the point of use, not all upfront: - deep-review/PHASES.md -- the time budget, rules of engagement, the eleven review phases (step-by-step), and the global execution rules. - deep-review/REPORT-FORMAT.md -- the exact section template for the final report written in Phase 11. Read deep-review/PHASES.md now, before Phase 1. It opens with the rules of engagement and time budget, then walks every phase in order. Execute the phases sequentially; within each phase, parallelize the read-only analysis with agent teams as that phase instructs. The eleven phases: 1. Discovery -- map the system, build the file inventory, enumerate ALL features. 2. Threat Modeling -- formal STRIDE/LINDDUN threat model before hunting bugs. 3. Security Review -- injection, auth/authz, crypto, data exposure, web, mobile, infra. 4. AI/LLM/Agentic Security Review -- OWASP LLM (2025) + Agentic (2026); skip if no AI. 5. Secrets, Supply Chain, and CI/CD Pipeline Audit. 6. Concurrency and Race Condition Analysis. 7. Cloud, Container, and Infrastructure Security -- skip if no cloud/IaC. 8. Architectural Review -- design quality, lifecycle, data, resilience, scalability, API. 9. Functional Review -- trace ALL features, read ALL files, detect stubs/placeholders. 10. Cross-Validation -- independent re-trace of every Critical/High finding. 11. Report -- compile the report using deep-review/REPORT-FORMAT.md and write it to the output path determined above. When you reach Phase 11, read deep-review/REPORT-FORMAT.md and produce the report in exactly that structure. --- Does Not Do - Does NOT change production code. This is a READ-ONLY review; working artifacts go in .claude/scratch/ and only the final report in docs/deep-reviews/ persists. - Does NOT apply fixes. It writes the explicit fix code into findings, but applying them is a separate step -- use /apply to land the remediations. - Does NOT run dynamic/behavioral attacks against a live service. For adversarial runtime testing use /red-team; for both static and dynamic together use /security-audit. - Does NOT ask for input mid-run. It executes the entire review autonomously. ## Source & license This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [dndungu](https://github.com/dndungu) - **Source:** [dndungu/agent-skills](https://github.com/dndungu/agent-skills) - **License:** MIT Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v0.1.0 — what this tool can access: - **Network access:** no - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** no *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** — security scan: passed — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/skill-dndungu-agent-skills-deep-review - Seller: https://agentstack.voostack.com/s/dndungu - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.