review-swarm

# Review Swarm Review the working changes with a panel of specialists in parallel, then keep only the findings that survive scrutiny. Free and local (Claude subagents). ## Proactive use If the user asks to review, check, or assess changes — or you've just finished a non-trivial implementation and a PR is next — invoke this without being asked: announce in one line ("Running review-swarm on <scope>") and proceed. Never ask permission to run the skill. ## Steps 1. **Scope the diff.** Default: working tree vs the default branch. `staged` → `git diff --staged`; `branch` → vs merge-base with main; a path → limit to it. Read the changed hunks and enough surrounding code to judge them. 2. **Fan out specialists — in parallel.** Spawn the reviewers below with the Agent tool, **all in one message** so they run concurrently. Give each the diff plus the files it needs and its single lens. Each returns findings as: `severity · file:line · what · why · suggested fix`. - **Correctness** — logic errors, edge cases, null/empty, off-by-one, concurrency/races. - **Security & trust boundaries** — authz/authn (JWT), input validation at boundaries, injection, IDOR, leaked secrets. - **Data & performance** — N+1 (JPA/Hibernate, SQLAlchemy), missing indexes, unbounded queries, transaction scope, lazy-load traps. - **Architecture & altitude** — does it fit the domain model? are invariants enforced at the core? wrong layer, leaky abstraction. - **...