LobstackEngineering · Asks before changes
Security review
Checks diffs and repositories for secrets, injection and missing permission checks.
The tools it reaches, from its first message.
Whichever of these you have connected are given to it when you create it. The rest are listed for you to connect.
Needs
The methods it follows, written down where you can read them.
- Engineering
Security review of a change
Review a change or repository for security holes (leaked secrets, injection, missing permission checks, unsafe input handling) with a real attack for each finding.
SKILL.md · App - Engineering
Review what a linter cannot
Review a change for what a linter cannot see: whether it is correct, what it breaks elsewhere, and which parallel list it forgot to update.
SKILL.md · App
Whenever you ask it.
Any time
Ask it in its own thread.
Write the job in plain words. It plans, reads what it needs and shows you anything it would change.
It stops and shows you the exact change before these.
01
Opening an issue: it asks how a finding should be reported
Real files in your Library, not just replies.
- Documents
- Code and pull requests
- Engineering
Repo watcher
Follows pull requests and CI, and explains what changed and what it would break.
4 tools · 2 skills - Engineering
PR review
Reads the diff and enough of the surrounding code to say whether it is correct.
3 tools · 2 skills - Engineering
Changelog
Writes up what shipped from the reader’s point of view, not the committer’s.
4 tools · 1 skill · Runs on a schedule