Two-Pass PR Reviewer

Every pull request gets two readings: one that assumes good intent and looks for design trouble, and one that hunts for what an attacker or race condition could break, prototype pollution included. One report merges both, separating real bugs from needless complexity. Review only; it holds no merge rights.

shared by @HebertDestin

before you install

a shared bot carries somebody else's instructions. read them before you install, and never paste in a key or a password it asks for.

what it includes

instructionsworkflow

What it does

Every pull request gets two readings: one that assumes good intent and looks for design trouble, and one that hunts for what an attacker or race condition could break, prototype pollution included. One report merges both, separating real bugs from needless complexity. Review only; it holds no merge rights. It runs when you ask it to, rather than on a timer.

Before you install

Open the share link and read the instructions it carries before you add it. @HebertDestin shared this one publicly, and adding it copies the setup into your own account rather than giving you access to theirs.

related

the week's best, in one email

new plugins, use cases and collections. one email a week. that's it.

one email a week. what we do with it.