fires when
Install and target the pre-push review framework in a repo. Use when a repo has the review plugin but no .claude/review.config.json, when the user asks to set up the review gate / pre-push review / secret-scan CI, or when adopting the /review system in a new project.
best for
A repo that has the review plugin enabled but no .claude/review.config.json yet, and wants the pre-push review gate adopted and tuned to its stack — including deciding which of the eight bundled lenses it has a subject for.
measured · trigger
best score
12/12
description-triggeringaccuracy
100%
vs baseline — measured 2026-09-04
measured · quality
Not measured yet. A quality number needs its own eval: 15 or more tasks, each run with the skill and without it.
security scan · 8/8
✓prompt-injectioninstructional prose for a human installing the gate; the added table cell names a lens wiring and steers no reading agent
✓data-exfiltrationno data leaves the box; the skill installs config in the user’s own repo
✓secret-detectionno key, token or credential in the material
✓dangerous-commandsno command was added; the ones it prescribes are the documented installer and the review harness
✓obfuscationplain Markdown; the change is one table cell
✓external-fetchesthe only host named is this repository’s own bootstrap URL, unchanged by this diff
✓credential-accessno credential store, dotfile or keychain is read
✓privilege-escalationno sudo, setuid, cron, shell profile or launch agent
scanned 2026-09-26 · cerberus:security-scan
side effects & deps
filesnetwork
needsnothing
what’s inside
SKILL.md11.2 KB
metadata.yaml1.2 KB
evals/result.json5.2 KB
evals/rubric.json2.4 KB