hack-review
Installation
SKILL.md
Hack Review
Overview
Treat the change set as a scoped hack-risk audit with an engineering gate recommendation. The primary job is to enumerate every distinct structural liability that can be reasonably identified within the reviewed scope, not only the most severe or easiest findings.
Always produce a Markdown report file and a short terminal summary.
Keep the overall recommendation mechanically aligned with the highest-severity unresolved finding and the coverage state. Do not let prose tone drift the gate up or down.
Outcome and Handoff
- Keep the review phase read-only apart from its report artifact. For a review-only request, finish with the report.
- If the user also requested fixes, finish and freeze the report, then verify and address the authorized findings using the corresponding receiving workflow. Preserve the user's existing scope; do not require a later request solely because review has finished.
- Record the requested outcome and continuation in the report. A ready report or a gate recommendation does not grant implementation authority.
- For a post-fix review, inspect only the implementation delta and affected paths. Carry forward settled intent and disproved claims unless relevant code, contracts, or evidence changed. Return remaining findings without automatically starting another receiving cycle.