# Code Review > Review the diff of substantial work before it is committed, after `verify` has passed. A gate-weakening scan first, then two always-on review axes with fresh eyes (standards conformance, and spec plus commit-message fidelity), plus a security axis that fires only on auth, payments, PII, external input, crypto or uploads, each reported by severity and never merged into one list. Use before committ… - **Type:** Skill - **Install:** `agentstack add skill-tradebaas-groundwork-code-review` - **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior - **Seller:** [Tradebaas](https://agentstack.voostack.com/s/tradebaas) - **Installs:** 0 - **Category:** [Finance & Payments](https://agentstack.voostack.com/c/finance-and-payments) - **Latest version:** 0.1.0 - **License:** MIT - **Upstream author:** [Tradebaas](https://github.com/Tradebaas) - **Source:** https://github.com/Tradebaas/Groundwork/tree/main/.agents/skills/code-review - **Website:** https://tradebaas.github.io/Groundwork/ ## Install ```sh agentstack add skill-tradebaas-groundwork-code-review ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About # code-review: fresh eyes on the diff, one axis at a time Runs before substantial work is committed, after `verify` has passed. Trivial changes (a typo, a one-line fix with an obvious cause) skip it; everything with a spec gets it. The subject is the actual diff about to be committed, not the intention behind it. ## Ground rules - **Independent axes, fresh eyes each.** Two axes always run (A and B); a third (C) runs only when the diff is security-sensitive, per its own trigger below. If your tool has subagents, give each axis that runs its own subagent with only the inputs named below. Without subagents, run them as sequential passes, re-reading the diff from scratch each time and carrying no conclusions across. - **Skip what tooling already enforces.** Formatting, line caps, denylist, secrets and the rest of `checks/check.mjs` plus the stack gates are the machines' job. A finding a gate would have caught means the gates were not run; stop and run them. - **Report by severity per axis: blocker, major, minor.** The axes are never merged into one ranked list. Each finding names the file and location, states the problem, and proposes the smallest fix. ## First: did this diff weaken a gate? The axes below hand formatting, denylist, secrets and the rest of `checks/check.mjs` to the machines. That hand-off holds only while the machines still run at full strength, so this scan comes first on every review. It is mechanical and needs no fresh eyes: one pass over the diff, looking for the moves that lower the bar instead of clearing it. - **A test stopped running:** deleted, renamed out of what the runner collects, marked skipped or pending (`.skip`, `xit`, `@pytest.mark.skip`, a commented-out body), or parked by an `.only` that takes its neighbors with it. - **A test stopped asserting:** the name survives, but the assertion is gone, softened to a truthiness check, or rewritten to expect whatever the code now produces. - **A threshold moved the easy way:** a coverage minimum, a line or size budget, a lint severity dropped to warning, an allowed-failures count raised. - **A check switched off:** a rule disabled in config, a strictness flag flipped, an entry dropped from `checks/config.json`, a CI step removed or made non-blocking, a hook shortened, `--no-verify` anywhere. - **A suppression appeared at the call site:** `eslint-disable`, `@ts-ignore`, `# noqa`, `# type: ignore` and their kin. A hit is a blocker unless the diff makes the case in the open, in the same commit: the behavior under test genuinely went away with the code, or the gate itself was wrong and the message or spec says why and what replaced it. Silence is the tell. AGENTS.md forbids bypassing a gate; this is the one moment when the bypass is still visible as a diff instead of as a habit. ## Axis A: standards conformance Inputs: the diff, `docs/standards/GLOBAL.md`, and the stack file in `docs/standards/`. Question: does this code meet the written standards, and is it free of the classic smells? Baseline of thirteen smells to check by name, beyond whatever the standards say: 1. Mysterious name: the name needs the implementation to be understood. 2. Duplicated code: the same knowledge written twice. 3. Feature envy: a function that mostly manipulates another module's data. 4. Data clumps: the same group of values traveling together unbundled. 5. Primitive obsession: domain concepts passed around as bare strings and numbers. 6. Repeated switches: the same case analysis dispatched in several places. 7. Shotgun surgery: one conceptual change forcing edits in many files. 8. Divergent change: one file edited for many unrelated reasons. 9. Speculative generality: hooks and options for a future nobody scheduled. 10. Message chains: reaching through object after object to get one value. 11. Middle man: a layer that only forwards to the next layer. 12. Refused bequest: inheriting an interface and ignoring most of it. 13. Hedged naming: a name that records the edit history instead of the thing (`utils2`, `enhanced_*`, `*_v2`, `*_final`, a `FooManager` sitting next to `Foo`). Not the same as a mysterious name: this one is clear enough, it is evasive. It exists because nobody chose between the old version and the new one, so both ship. The fix is the choice: replace the original, or name what actually differs about this one. **On a platform stack.** When the stack file's header declares a hosted platform, the seven that describe object structure (3, 4, 5, 6, 10, 11, 12) go quiet against solution XML, flow definitions and generated exports. The other six survive the translation and are where the findings are: a flow named `New flow 1`, the same logic copied into three flows, a solution edited for unrelated reasons, one change forcing edits across a dozen artifacts, options nobody asked for, and `Flow - Copy` shipping beside the original. The subject of the review is what the platform actually runs - flows, apps, business rules, security roles, connector permissions, environment variables - read in the platform's own terms, with the export diff treated as the transport it is. The discriminator matters here: churn the exporter produced (reordered nodes, regenerated ids, timestamps) is not a finding, while a security role granting more than the spec asked for is one whether or not the diff makes it obvious. The standards file's platform craft section (environment strategy, naming, blessed and deprecated patterns, connector governance) is the written standard this axis holds it to. ## Axis B: spec and message fidelity Inputs: the diff, the spec (tier S: the request as recorded), and the commit message about to be used. Question: does the diff do exactly what the spec says, no less and no more, and does the message describe the diff that is actually there? - **Missing behavior:** an acceptance criterion or stated requirement the diff does not satisfy. Quote the spec line in the finding. - **Scope creep:** behavior in the diff that no spec line asks for. Quote the nearest spec line it exceeds, or state that no line covers it. Creep goes to INTAKE.md, not into the commit. - **Message drift:** the message and the diff describe different work. The type is wrong for what changed (`fix:` on new behavior, `docs:` on a code change), the subject names the intention rather than what a reader will find in the diff, a second change rides along unmentioned, or the `Traces-to:` trailer names an item this diff does not serve. A welcome extra is still undeclared work: name it in the message or lift it out of the commit. - Every finding here quotes its source: the spec line for behavior, and for message drift the subject plus the hunk it fails to cover. A fidelity finding with nothing quoted is an opinion and belongs on axis A or nowhere. ## Axis C: security (conditional) Runs only when the diff touches at least one of these six surfaces. When it touches none, record "axis C: not triggered" and skip it - this is what keeps the axis off the cost of every review (decision 0015): a login form pays for it, a copy change does not. - **auth**: authentication, sessions, tokens, identity, or access-control decisions. - **payments**: money movement, billing, orders, anything with a price. - **PII**: personal data read, stored, exported, or logged (a GDPR/AVG surface). - **external input**: any value crossing a trust boundary - request bodies and params, webhook and third-party payloads, file contents, message-queue data. - **crypto**: encryption, hashing, signing, token or key generation, security-relevant randomness. - **uploads**: files received from a client (a high-risk case of external input, named on its own because it breaks in its own ways). Inputs: the diff, the security floor in `docs/standards/GLOBAL.md`, and the stack file. The secrets scan and the dependency audit already run as gates; this axis is the design judgment they cannot make. Question: on the surfaces the diff touches, does it hold the floor and avoid the classic breaks? Seven breaks to check by name, drawn from the OWASP Top 10 classes plus GDPR/AVG data minimization (grounds: NIST SSDF PW.7, ISO/IEC 27001:2022 A.8.28): 1. Missing authorization: an action or query that confirms the caller is logged in but not that this caller may touch this specific record. 2. Unsanitized sink: external input reaching a query, shell command, path, template, or redirect without being parameterized, encoded, or allow-listed for that sink. 3. Fail-open check: an auth or validation branch whose failure path falls through to allow instead of deny, the floor's "fail closed" read backwards. 4. Sensitive data leaking sideways: a secret, token, or PII field flowing into a log, a URL, an error message, or a client response that should not carry it. 5. Weak or hand-rolled crypto: a home-grown cipher or token scheme, a predictable random source for a security value, an unsalted or fast password hash, a secret compared non-constant-time. 6. Trusting the client's file: an upload accepted on its client-supplied name or type, written to an executable or web-served path, or stored with no size or type bound. 7. Collecting more than needed: new personal data gathered or kept past the stated purpose (GDPR/AVG data minimization). Report at blocker, major, or minor like the other axes, each finding naming the surface, the concrete break, and the smallest fix. A security finding sits on the never-simplify-away floor (AGENTS.md): a blocker here is fixed, not accepted away. ## After the review Blockers are fixed before the commit; the fix goes back through `verify`. Majors are fixed or explicitly accepted by the owner. Minors are fixed cheaply now or recorded (INTAKE.md for ideas, DEBT.md with a `defer:` marker for accepted debt). Refactoring findings are applied here, in the review stage, as their own change: never folded into the implementing diff (see `docs/standards/GLOBAL.md`). Report the outcome per axis in a few lines, then proceed to `scope-guard` and the commit. ⚓ ## Source & license This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [Tradebaas](https://github.com/Tradebaas) - **Source:** [Tradebaas/Groundwork](https://github.com/Tradebaas/Groundwork) - **License:** MIT - **Homepage:** https://tradebaas.github.io/Groundwork/ Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v0.1.0 — what this tool can access: - **Network access:** no - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** no *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** — security scan: passed — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/skill-tradebaas-groundwork-code-review - Seller: https://agentstack.voostack.com/s/tradebaas - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.