Infrastructure Code Review
Run an infrastructure-focused review using 6 infrastructure checklists via the senior-review-specialist agent.
Instructions
Spawn the senior-review-specialist agent to perform this review.
Checklists to Apply
Load and apply these review checklists:
commands/review/infra.md - Deployment config, least privilege, operational claritycommands/review/ci.md - Pipeline security, deployment safetycommands/review/release.md - Versioning, rollout, migration, rollbackcommands/review/migrations.md - Database migration safetycommands/review/logging.md - Secrets exposure, PII leaks, wide-eventscommands/review/observability.md - Logs, metrics, tracing, alertability
Agent Instructions
The agent should:
- Get working tree changes: Run
git diff to see all changes
- Identify infrastructure files:
- Terraform, CloudFormation, Kubernetes manifests
- CI/CD pipelines (GitHub Actions, GitLab CI, etc.)
- Migration files, deployment scripts
- Logging and monitoring configuration
- For each changed file:
- Read the full file content
- Go through each diff hunk
- Apply all 6 infrastructure checklists
- Look for security misconfigurations and operational risks
- Cross-reference related files: Check environment configs, secrets handling
- Assess blast radius: What could go wrong in production?
Output Format
Generate an infrastructure review report with:
- Critical Issues (BLOCKER): Security misconfigurations, deployment risks
- High Priority Issues: Missing guardrails, cost explosions
- Medium Priority Issues: Observability gaps, operational hazards
- Infrastructure Map: Components, dependencies, deployment topology
- Operational Readiness: Logging, alerting, rollback capabilities
- File Summary: Infrastructure issues per file
- Overall Assessment: Production readiness recommendation
1---2name: review-infra3description: Infrastructure-focused review covering IaC, CI/CD, releases, migrations, logging, and observability. Spawns the senior-review-specialist agent for infrastructure analysis.4---5
6# Infrastructure Code Review
7
8Run an infrastructure-focused review using 6 infrastructure checklists via the senior-review-specialist agent.
9
10## Instructions
11
12Spawn the `senior-review-specialist` agent to perform this review.
13
14## Checklists to Apply
15
16Load and apply these review checklists:
17
18- `commands/review/infra.md` - Deployment config, least privilege, operational clarity
19- `commands/review/ci.md` - Pipeline security, deployment safety
20- `commands/review/release.md` - Versioning, rollout, migration, rollback
21- `commands/review/migrations.md` - Database migration safety
22- `commands/review/logging.md` - Secrets exposure, PII leaks, wide-events
23- `commands/review/observability.md` - Logs, metrics, tracing, alertability
24
25## Agent Instructions
26
27The agent should:
28
291. **Get working tree changes**: Run `git diff` to see all changes
302. **Identify infrastructure files**:
31 - Terraform, CloudFormation, Kubernetes manifests
32 - CI/CD pipelines (GitHub Actions, GitLab CI, etc.)
33 - Migration files, deployment scripts
34 - Logging and monitoring configuration
353. **For each changed file**:
36 - Read the full file content
37 - Go through each diff hunk
38 - Apply all 6 infrastructure checklists
39 - Look for security misconfigurations and operational risks
404. **Cross-reference related files**: Check environment configs, secrets handling
415. **Assess blast radius**: What could go wrong in production?
42
43## Output Format
44
45Generate an infrastructure review report with:
46
47- **Critical Issues (BLOCKER)**: Security misconfigurations, deployment risks
48- **High Priority Issues**: Missing guardrails, cost explosions
49- **Medium Priority Issues**: Observability gaps, operational hazards
50- **Infrastructure Map**: Components, dependencies, deployment topology
51- **Operational Readiness**: Logging, alerting, rollback capabilities
52- **File Summary**: Infrastructure issues per file
53- **Overall Assessment**: Production readiness recommendation
majiayu000