← ClaudeAtlas

independent-reviewlisted

Use when security, auth, billing, concurrency, data integrity, or another high-stakes artifact needs adversarial review by a provider other than its author.
lawzava/megapowers · ★ 4 · Code & Development · score 73
Install: claude install-skill lawzava/megapowers
# Independent Review Use model review for residual uncertainty after executable checks. State artifact intent and acceptance boundary. Same-provider review provides context separation. The lead owns remediation and reruns the oracle. ## Trusted review path The operator supplies the reviewer family and exact command from the capability registry or user instruction. Never guess. Inspect a file or immutable commit range before any external call. Set `review_tool` to the installed `scripts/megapowers-review.go` beside this `SKILL.md`, not a project copy. ```bash reviewer_cmd='<reviewer CLI and arguments>' # {prompt_file} and {scratch_dir} expand go run "$review_tool" inspect --file path/to/file \ --provider <reviewer-family> --provider-command "$reviewer_cmd" go run "$review_tool" inspect --base <base-revision> --head <head-revision> \ --provider <reviewer-family> --provider-command "$reviewer_cmd" ``` The inspection prints the binary path and hash, the command, each chunk's package hash, and one `approval_token`. Check them, then approve only that exact package, binary, and command with the author's family declared: ```bash go run "$review_tool" review --file path/to/file \ --provider <reviewer-family> --provider-command "$reviewer_cmd" \ --author <author-family> --approve-external "$approval_token" ``` Author and provider labels must differ and name real vendor families. The prompt arrives on stdin unless the command names `{prompt_file}`. Credentials pass only