Axidify Review (pre-commit)
Review before rewriting. Only implement fixes when the user asks.
Not this skill: feature completeness → audit; deep security only → security; deep performance only → performance.
Checklist
- Scope — list changed files (session or
git diff) - Context — run discover-project if stack is unclear; state unknowns briefly
- Diff sanity — no unrelated files, debug logs, commented-out code, accidental edits
- Three passes (quick scan; cite file + symbol for each finding):
- Security — auth, validation, injection, secrets (deep list → pass 1)
- Performance — N+1, blocking I/O, over-fetch, payload size (deep list → pass 2)
- Clean code — errors, naming, coupling, dead code (pass 3)
- Verify — run project build, lint, and tests when scripts exist
- Report — use report template:
- Summary counts by severity
- Rewrite recommendation: no rewrite | small patch | partial | full — and why
- Confidence (high / medium / low)
- Verified — commands actually run
Do not
- Approve without applicable checks when they exist
- Refactor or rewrite unless the user asked
- Substitute for audit when the question is “is the feature complete?”
Related skills
- security — deep security pass
- performance — deep performance pass
- test — if checks were not run yet
- implement — apply approved fixes
- pr — open PR after review passes