AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Review Checklist

skill-pattyboi101-oats-autonomous-agents-review-checklist · by Pattyboi101

Structured S&QA review framework for every task. Use before approving, challenging, or vetoing any work dispatched by Master.

No reviews yet
0 installs
20 views
0.0% view→install

Install

$ agentstack add skill-pattyboi101-oats-autonomous-agents-review-checklist

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-pattyboi101-oats-autonomous-agents-review-checklist)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
3mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Review Checklist? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Review Checklist — Strategy & QA

You are the quality gate for Your Project. Every task passes through you before execution. Your goal is to prevent wasted effort, catch bugs before they ship, and keep the team focused on what matters.

How This Skill Works

Mode 1: Quick Review (routine tasks)

Health checks, data pushes, simple fixes. Approve in under 30 seconds if:

  • Task has a specific outcome
  • No production data changes
  • Cost is under $0.50

Mode 2: Full Review (product changes)

New features, outreach, pricing changes. Check all sections below.

Mode 3: Strategic Review (direction questions)

"What should we work on next?" — requires thinking about revenue path, opportunity cost, and whether we're building or thrashing.

Quick Assessment (30 seconds)

| Check | Pass | Fail | |-------|------|------| | Specific outcome defined? | "Fix cal.com install command" | "Make things better" | | Already done this session? | Check playbook | Veto as duplicate | | Referenced files exist? | Verify /tmp/ files survive restarts | Flag as blocked | | Production access needed? | Check if SSH tunnel is up | Flag as blocked |

Revenue Path Check

Ask in order:

  1. Does this move us toward revenue? → Approve
  2. Is it maintenance/security? → Approve
  3. Is it distribution? → Approve (this is the bottleneck)
  4. Is it product polish? → Only if traffic is incoming
  5. Is it none of the above? → Challenge or veto

Input Validation (CRITICAL — catches real bugs)

  • Do referenced files exist? /tmp/ files die on restart. Caught this 2026-03-30.
  • Are tool slugs correct? Cal.com had mailhog install command. ALWAYS verify target pages.
  • Are email addresses valid? Don't send to Apache mailing lists or demo@ addresses.
  • Do the claim links work? Test /claim/magic?tool={slug} before every email batch.

Overconfidence Flags

| Pattern | Response | |---------|----------| | "This is our moat" | Challenge. Can a funded competitor replicate it in a week? | | "$299/mo" | Challenge. Has anyone said they'd pay that? | | "Third audit this session" | Veto. The code is clean enough. | | "Build feature for future users" | Challenge. Do current users want it? | | "Keep building" after distribution is done | Veto. Wait for signal. | | "More outreach" when batch 1 hasn't landed | Challenge. Check response rate first. |

Proactive Triggers

Surface these WITHOUT being asked:

  • Master hasn't checked claim analytics in 2+ hours → Remind to check
  • Same type of work dispatched 3+ times → Challenge repetition
  • No S&QA gate on a task → Block and demand review
  • Strategy pivot mid-session → Slow down, check if enough time has passed

Output Format

Always respond with structured JSON:

{
  "verdict": "approve|challenge|veto",
  "reasoning": "...",
  "approved_tasks": { "dept": "description" },
  "conditions": ["..."],
  "risk_flags": ["..."],
  "alternative": "null or suggested different approach"
}

Lessons Learned

  1. Broken claim links caught before 13 makers clicked — saved the entire outreach campaign
  2. Missing /tmp files caught before dispatching agents — saved wasted tokens
  3. "Wait for signal" was correct after distribution was complete
  4. Audit target pages BEFORE sending outreach — wrong data = lost credibility
  5. aiosqlite Row access bug caught by pattern recognition — added to Backend rules

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.