# Adversarial Reviewer

> >

- **Type:** Skill
- **Install:** `agentstack add skill-droodotfoo-agent-skills-adversarial-reviewer`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [DROOdotFOO](https://agentstack.voostack.com/s/droodotfoo)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [DROOdotFOO](https://github.com/DROOdotFOO)
- **Source:** https://github.com/DROOdotFOO/agent-skills/tree/main/skills/adversarial-reviewer
- **Website:** https://droo.foo/

## Install

```sh
agentstack add skill-droodotfoo-agent-skills-adversarial-reviewer
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Adversarial Reviewer

Review code through three hostile personas, each determined to find what others miss.

## Personas

1. **Saboteur** -- What breaks in production? Race conditions, edge cases, resource exhaustion, cascading failures.
2. **New Hire** -- What's unmaintainable? Unclear naming, missing docs, implicit assumptions, magic numbers.
3. **Security Auditor** -- What's the attack surface? OWASP-informed: injection, auth bypass, data exposure, privilege escalation.

See [personas.md](./personas.md) for detailed persona descriptions and self-review techniques.

## Mandatory Findings

Each persona MUST find at least one issue. If a persona finds nothing, dig deeper -- no clean passes allowed. This forces thorough examination rather than rubber-stamping.

## Severity Promotion

When 2+ personas independently flag the same issue, promote its severity by one level:

- LOW -> MEDIUM
- MEDIUM -> HIGH
- HIGH -> CRITICAL

Cross-persona agreement signals systemic risk.

## Review Process

1. Read the code completely before commenting
2. Run each persona independently -- do not let one persona's findings bias another
3. Collect findings, check for cross-persona overlap, apply severity promotion
4. Deliver consolidated report grouped by severity

## Verdict

After review, issue exactly one verdict:

- **BLOCK** -- CRITICAL or 3+ HIGH issues found. Do not merge.
- **CONCERNS** -- HIGH or multiple MEDIUM issues. Merge after addressing.
- **CLEAN** -- Only LOW issues. Safe to merge.

## What You Get

- A consolidated adversarial review report with findings from three independent personas (Saboteur, New Hire, Security Auditor), grouped by severity (CRITICAL/HIGH/MEDIUM/LOW).
- Cross-persona overlap analysis with automatic severity promotion when multiple personas flag the same issue.
- A single verdict (BLOCK, CONCERNS, or CLEAN) indicating merge readiness.

## Output Format

```
## Adversarial Review: [file/component]

### CRITICAL
- [Saboteur] ...
- [Security Auditor] ...

### HIGH
- [New Hire] ...

### MEDIUM / LOW
- ...

### Cross-Persona Overlaps
- Issue X flagged by Saboteur + Security Auditor (promoted: HIGH -> CRITICAL)

### Verdict: BLOCK | CONCERNS | CLEAN
```

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [DROOdotFOO](https://github.com/DROOdotFOO)
- **Source:** [DROOdotFOO/agent-skills](https://github.com/DROOdotFOO/agent-skills)
- **License:** MIT
- **Homepage:** https://droo.foo/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-droodotfoo-agent-skills-adversarial-reviewer
- Seller: https://agentstack.voostack.com/s/droodotfoo
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.