# Review

> Use before merge, after subagents, or for spec/plan review.

- Skill: `concertonotes/review-4` (Agent Skill)
- Install (CLI): `npx skillmds@latest add concertonotes/review-4`
- Raw SKILL.md: https://api.skillmd.com/api/skills/concertonotes/review-4/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: ConcertoNotes (https://skillmd.com/u/concertonotes)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/concertonotes/review-4

---

# Review

Check in order:
1. **Spec match** (if spec exists) - diff does what the spec/plan said? List drift.
2. **Documentation** (always) - README/comments reflect actual behavior?
3. **Tests** - new behavior covered, all green?
4. **Edges** - null, empty, large, concurrent, malformed, unicode, timezone.
5. **Security** - input validation, secrets, authz, injection, path traversal.
6. **Scope** - unrelated changes? Revert. Implementation >2x necessary? Flag as FIX.

For spec/plan reviews, also block unresolved implementation notes, plan assumptions absent from spec, vague acceptance, or premature `[parallel]`.

Report:
```
BLOCK: <must fix>
FIX:   <should fix>
NIT:   <optional>
```
BLOCKs resolved before merge. FIX resolved or explicitly deferred with reason.