Verifies a single PR review finding from CodeRabbit, Codex, or Copilot against the current state of the Shelf codebase and returns a structured verdict. Read-only — never edits code and never writes to GitHub. Invoked by the /pr-review-loop skill, one instance per finding, in parallel.
Headless variant of shelf-security-reviewer for the pre-commit hook. Receives the staged diff inline (the wrapper script pre-computes it). Tools restricted to Skill only — no Bash, no WebFetch, no Agent — so prompt injection in the diff cannot exfiltrate. Outputs a strict JSON envelope for safe parsing. Do NOT invoke…
Security-focused reviewer for Shelf PRs and diffs. Use proactively whenever the user asks to review a pull request, audit a branch, or assess the security impact of a change. Always invokes the security-review, oauth-oidc-misconfiguration, supabase, and two-factor-authentication-best-practices skills, and layers…