Code review

About

Reviews the working diff for defects that actually bite - not style opinions your formatter already settled.

Files in v1.0.0

• replicamd.plugin.json1553 B
• skills/review-standard.md1150 B

Contributes

{
  "commands": [
    {
      "id": "diff",
      "title": "Review my working diff",
      "prompt": "Read `git diff` and `git diff --staged`. Review for correctness first: wrong logic, unhandled errors, off-by-one, a promise nobody awaits, state mutated during a render, a resource never closed. For each finding give the file, the line, and the concrete input that makes it go wrong - if you cannot name that input, it is a guess and you should drop it. Ignore formatting and naming taste; the formatter and the reader can handle those. End with a one-line verdict."
    },
    {
      "id": "security",
      "title": "Look for security problems in the diff",
      "prompt": "Read the working diff and look only for security-relevant changes: user input reaching a shell, a query, a file path or a template; auth or permission checks that got weaker; secrets or tokens written to logs or disk; a redirect or origin check that now accepts more than it did. For each, say what an attacker would send and what they would get. If the diff has no security surface, say that instead of padding the list."
    }
  ],
  "skills": [
    "skills/review-standard.md"
  ]
}

Versions

• v1.0.07/26/2026 · 2 files

Install

Nothing happened? ReplicaMD may not be installed yet - or open it first, then Settings → Plugins and install by id.

Plugin id:

Bundle endpoint: