Parallel Review
Run security-review and deep-code-quality-review concurrently, synthesize into one prioritized report.
Do NOT use when
- Only security OR quality review needed (use the specific skill directly)
- During normal coding
- For single-file changes where sequential review is fast enough
Workflow
- Run
ck_git_diffto gather the diff. Runck_validatefor automated findings. - Launch both reviews (via
ck_delegateor sequential invocation):- Security:
security-reviewskill — OWASP, injection, auth, secrets, deps - Quality:
deep-code-quality-reviewskill — abstraction, file size, spaghetti, layering Both record findings independently viack_finding.
- Security:
- Synthesize:
- Deduplicate: same code path flagged by both → one finding, higher severity
- Prioritize: critical > high > medium > low; security > quality > reviewability
- Weight overlaps: flagged by both = higher confidence
- Resolve disagreements with your own judgment
- Submit via
ck_review_submit(review_type:diff) with combined findings. - Wait for approval before merge/deploy.
Rules
- Both reviews must complete — do not skip one
- Blocked finding from either = merge blocked
- Deduplicate, do not double-count
Output
- Combined findings (deduplicated, prioritized)
ck_review_submitdiff review- Clear verdict: merge / merge with warnings / blocked