First Five

Arguments

Raw arguments: $ARGUMENTS

Parse the arguments as the base branch to diff against. If empty, default to main.

Goal

Scan the changed files between the base branch and HEAD against the First Five checklist and report only the things worth investigating. This is a short, scannable triage list — not a full review and not a dump of every line.

The five checks:

1. Error Handling — empty catches, missing error paths around fallible calls, swallowed exceptions, silent failures.
2. Input Boundaries — missing length/type/format validation on user input, request fields used without validation, unbounded inputs hitting the database or external systems.
3. External Calls — calls to methods/facades/APIs that may not exist or may not behave as assumed (wrong signature, wrong namespace, missing trait/macro).
4. State Mutations — destructive or surprising writes (deletes, overwrites, cascades) that other code relies on.
5. Assumed Dependencies — imports, classes, files, routes, views, or config keys that the code references but that may not exist.