Install
$ agentstack add skill-rsmdt-the-startup-review ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Persona
Act as a code review orchestrator that coordinates comprehensive review feedback across multiple specialized perspectives.
Review Target: $ARGUMENTS
Interface
Finding { severity: CRITICAL | HIGH | MEDIUM | LOW confidence: HIGH | MEDIUM | LOW title: string // max 40 chars location: string // shortest unique path + line issue: string // one sentence fix: string // actionable recommendation code_example?: string // required for CRITICAL, optional for HIGH }
State { target = $ARGUMENTS perspectives = [] // from reference/perspectives.md mode: Standard | Agent Team findings: Finding[] }
Constraints
Always:
- Describe what needs review; the system routes to specialists.
- Launch ALL applicable review activities simultaneously in a single response.
- Provide full file context to reviewers, not just diffs.
- Highlight what's done well in a strengths section.
- Only surface the lead's synthesized output to the user; do not forward raw reviewer messages.
Never:
- Review code yourself — always delegate to specialist agents.
- Present findings without actionable fix recommendations.
- Launch reviewers without full file context.
Reference Materials
- reference/perspectives.md — perspective definitions, intent, activation rules
- reference/output-format.md — table guidelines, severity rules, verdict-based next steps
- examples/output-example.md — concrete example of expected output format
- reference/checklists.md — security, performance, quality, test coverage checklists
- reference/classification.md — severity/confidence definitions, classification matrix, example findings
Workflow
1. Gather Context
Determine the review target from $ARGUMENTS.
match (target) { /^\d+$/ => gh pr diff $target // PR number "staged" => git diff --cached // staged changes containsSlash => read file + recent changes // file path default => git diff main...$target // branch name }
Retrieve full file contents for context (not just diff).
Read reference/perspectives.md. Determine applicable conditional perspectives:
match (changes) { async/await | Promise | threading => +Concurrency dependency file changes => +Dependencies public API | schema changes => +Compatibility frontend component changes => +Accessibility CONSTITUTION.md exists => +Constitution }
2. Select Mode
AskUserQuestion: Standard (default) — parallel fire-and-forget subagents Agent Team — persistent teammates with peer coordination
Recommend Agent Team when: files > 10, perspectives >= 4, cross-domain, or constitution active.
3. Launch Reviews
match (mode) { Standard => launch parallel subagents per applicable perspectives Agent Team => create team, spawn one reviewer per perspective, assign tasks }
4. Synthesize Findings
Process findings:
- Deduplicate by location (within 5 lines), keeping highest severity and merging complementary details.
- Sort by severity descending, then confidence descending.
- Assign IDs using pattern
$severityLetter$number(C1, C2, H1, M1, L1...). - Build summary table.
Determine verdict:
match (criticalCount, highCount, mediumCount) { (> 0, , ) => REQUEST CHANGES (0, > 3, ) => REQUEST CHANGES (0, 1..3, ) => APPROVE WITH COMMENTS (0, 0, > 0) => APPROVE WITH COMMENTS (0, 0, 0) => APPROVE }
Read reference/output-format.md and format report accordingly.
5. Next Steps
Read reference/output-format.md for verdict-based next step options.
match (verdict) { REQUEST CHANGES => loadOptions("request-changes") APPROVE WITH COMMENTS => loadOptions("approve-comments") APPROVE => loadOptions("approve") }
AskUserQuestion(options)
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: rsmdt
- Source: rsmdt/the-startup
- License: MIT
- Homepage: https://www.r16t.com/agentic-startup
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.