etylsarin/fast-review
src/orchestrator/skills/fast-review/SKILL.md
Mandatory post-delegation gate that checks output completeness, verifies acceptance criteria compliance, flags regressions, and produces a PASS/FAIL verdict. Use when checking delegated work against acceptance criteria, running the post-delegation gate, validating agent output before acceptance, verifying a sub-agent completed its assignment, or running a post-delegation QA check.
$ install --global
skillsauthnpx skillsauth add etylsarin/opencastle fast-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 17, 2026, 3:05 AM122.6s2 files scanned
SKILL.md
- name:
- fast-review
- description:
- Mandatory post-delegation gate that checks output completeness, verifies acceptance criteria compliance, flags regressions, and produces a PASS/FAIL verdict. Use when checking delegated work against acceptance criteria, running the post-delegation gate, validating agent output before acceptance, verifying a sub-agent completed its assignment, or running a post-delegation QA check.
Skill: Fast Review
Contract
| Rule | Detail | |------|--------| | Trigger | After every delegation — no exceptions | | Reviewer | Single sub-agent; Economy tier (Standard for premium/security work) | | Verdict | PASS or FAIL with structured feedback | | Retry | ≤2 retries on FAIL; 3rd FAIL → panel review |
Procedure
1 — Collect Context
Issue + acceptance criteria, file diff, file partition, deterministic results (lint/test/build), agent self-report.
2 — Spawn Reviewer
Single runSubagent. Context = acceptance criteria, diff, partition, deterministic results only — no session history, no delegation prompt.
runSubagent({ agentName: 'Reviewer', prompt: `Review against ACs:\n${criteria}\nDiff:\n${diff}\nGates: lint ✅ test ✅ build ✅` });
3 — Parse Verdict
VERDICT: PASS | FAIL
ISSUES:
- [severity:critical|major|minor] Description
FEEDBACK: Actionable feedback.
CONFIDENCE: low | medium | high
- PASS — no critical/major issues (minor noted, non-blocking).
- FAIL — any critical/major issue, or output format mismatch.
Auto-PASS (skip reviewer): pure research/no code changes; docs-only .md changes; ≤10 lines across ≤2 non-sensitive files with all deterministic gates passing.
Sensitive override: Auth/middleware, DB migrations, RLS policies, security headers, CSP, env var schemas, CI/CD config always require review — even 1-line changes.
4 — Handle Verdict
| Outcome | Action |
|---------|--------|
| PASS | Log review; continue |
| FAIL 1–2 | Log; re-delegate same agent: "Retry N/2 — address listed issues" |
| FAIL 3 | Log escalated: true; load panel-majority-vote skill |
| Panel BLOCK ×3 | Dispute in .opencastle/DISPUTES.md (see team-lead-reference § Dispute Protocol) |
Reviewer Prompt Template
See REFERENCE.md for the full reviewer prompt template.
Logging
⛔ HARD GATE — Log the review before proceeding.
npx opencastle log review --skill <name> --outcome pass|fail --reviewer "Reviewer" --mechanism sub-agent
Integration & Overnight Mode
on-post-delegate Gate 5 (after deterministic Gates 1–4), ~5–15% token overhead. Overnight: upgrade one tier, escalate after 2 FAILs, checkpoint before panel.
Anti-Patterns
- Skipping fast review — never, including "trivial" changes.
- Panel as fast review — wastes ~3× tokens.
- Reviewer sees delegation prompt — evaluate against acceptance criteria only.
- Ignoring minor issues — track; 3+ recurrences → ticket.
- Force-accepting FAIL — retry or escalate.
- Skipping deterministic checks — does NOT replace lint/test/build.
Related Skills
etylsarin/validation-gates
development
VerifiedTrustedCommunity
Defines 10 sequential validation gates: secret scanning, lint/test/build checks, blast radius analysis, dependency auditing, browser testing, cache management, regression checks, and smoke tests. Use when running pre-deploy validation or CI checks, CI/CD pipelines, deployment pipeline validation, pre-merge checks, continuous integration, or pull request validation.
44SKILL.mdUpdated May 17, 2026
etylsarin/testing-workflow
development
VerifiedTrustedCommunity
Generates test plans, writes unit/integration/E2E test files, identifies coverage gaps, and flags common testing anti-patterns. Use when writing tests, creating test suites, planning test strategies, mocking dependencies, measuring code coverage, or test planning.
44SKILL.mdUpdated May 17, 2026
etylsarin/team-lead-reference
development
VerifiedTrustedCommunity
Provides model routing rules, validates delegation prerequisites, supplies cost tracking templates, and defines dead-letter queue formats for Team Lead orchestration. Load when assigning tasks to agents, choosing model tiers, starting a delegation session, running a multi-agent workflow, delegating work, choosing which model to use, or assigning tasks.
44SKILL.mdUpdated May 17, 2026
etylsarin/session-checkpoints
testing
VerifiedTrustedCommunity
Saves and restores session state including task progress, file changes, and delegation history. Use when saving progress, resuming interrupted work, picking up where you left off, or checkpointing current work.
44SKILL.mdUpdated May 17, 2026