# Deep Review

> Final comprehensive pull request review — the last gate before merge. Checks security, credentials, code quality, tech debt, conventions, and plan compliance.

- Skill: `conava/deep-review` (Agent Skill)
- Install (CLI): `npx skillmds@latest add conava/deep-review`
- Raw SKILL.md: https://api.skillmd.com/api/skills/conava/deep-review/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: Conava (https://skillmd.com/u/conava)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/conava/deep-review

---


# PR — Final Merge-Readiness Review

Launch the **reviewer** agent with `scope: branch` (model **opus**) for a comprehensive final review.

## Determine Scope
1. If a branch is specified, compare it against the base branch (main/master)
2. If no branch specified, review all changes on the current branch vs. base
3. Use `git diff main...HEAD` (or equivalent) to identify all changes

## Review Checklist
The reviewer (scope: branch) will perform:
1. **Security Audit** — Vulnerability scan, OWASP Top 10 checks
2. **Credential Scan** — Hardcoded keys, tokens, passwords, private keys
3. **Code Quality** — Technical debt, duplication, error handling, resource leaks
4. **Convention Adherence** — Naming, structure, imports, test organization
5. **Plan Compliance** — Every acceptance criterion met (if plan exists)
6. **Test Verification** — Full suite passes, meaningful coverage
7. **Documentation Check** — Docs updated for new features

## Verdict
- **APPROVED** — Code is merge-ready
- **HAS_FINDINGS** — Issues must be fixed first (with specific fix suggestions)