FreePublished on GitHub

fresh-eyes-review

This skill should be used as a mandatory final sanity check before git commit, PR creation, or declaring work done. Triggers on "commit", "push", "PR", "pull request", "done", "finished", "complete", "ship", "deploy", "ready to merge". Catches security vulnerabilities, logic errors, and business rule bugs that slip through despite passing tests.

The English summary is being prepared. Showing the original description.

aiskillstore/marketplace

Run score Not tested

See how to install

Files included (2)

SKILL.md6.2 KB
skill-report.json20.6 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Fresh-Eyes Review

Core Principle

"NO COMMIT WITHOUT FRESH-EYES REVIEW FIRST"

This represents a final quality gate executed after implementation completion, passing tests, and peer review. The discipline applies universally, even without explicit skill activation.

Key Distinctions

Fresh-eyes review differs fundamentally from testing and code review:

Approach	Focus	Blind Spots
Testing	Validates expected behavior	Can't test for unknown edge cases
Code review	Patterns and quality	Reviewer trusts author's intent
Fresh-eyes	Deliberate re-reading with psychological distance	Catches what you thought was correct

Critical insight: "100% test coverage and passing scenarios" can coexist with "critical bugs" waiting discovery.

Required Process

Step 1 - Announce Commitment

Explicitly declare: "Starting fresh-eyes review of [N] files. This will take 2-5 minutes."

This announcement creates accountability and reframes your mindset from implementation to audit.

Step 2 - Security Vulnerability Checklist

Review all touched files for security issues:

Vulnerability	What to Check
SQL Injection	All database queries use parameterized statements, never string concatenation
XSS	All user-provided content is escaped before rendering in HTML
Path Traversal	File paths are validated, `../` sequences rejected or normalized
Command Injection	Shell commands don't include unsanitized user input
IDOR	Resources are access-controlled, not just unguessable IDs
Auth Bypass	Every protected endpoint checks authentication and authorization

Example finding:

// Before: SQL injection vulnerability
const user = await db.query(`SELECT * FROM users WHERE id = '${userId}'`);

// After: Parameterized query
const user = await db.query('SELECT * FROM users WHERE id = $1', [userId]);

Step 3 - Logic Error Checklist

Error Type	What to Check
Off-by-one	Array indices, loop bounds, pagination limits
Race conditions	Concurrent access to shared state, async operations
Null/undefined	Every `.` chain could throw; defensive checks present?
Type coercion	`==` vs `===`, implicit conversions
State mutations	Unexpected side effects on input parameters?
Error swallowing	Empty catch blocks, ignored promise rejections

Example finding:

// Before: Off-by-one in pagination
const hasMore = results.length < pageSize;

// After: Correct boundary
const hasMore = results.length === pageSize;

Step 4 - Business Rule Checklist

Check	Questions
Calculations	Do formulas match requirements exactly? Currency rounding correct?
Conditions	AND vs OR logic correct? Negations applied properly?
Edge cases	Empty input, single item, maximum values, zero values?
Error messages	User-friendly? Leak no sensitive information?
Default values	Sensible defaults when optional fields omitted?

Example finding:

// Before: Tax calculation uses wrong rounding
const tax = price * 0.08;

// After: Proper currency rounding
const tax = Math.round(price * 0.08 * 100) / 100;

Step 5 - Performance Checklist

Issue	What to Check
N+1 queries	Loops that make database calls should be batched
Unbounded loops	Maximum iterations, timeout protection
Memory leaks	Event listeners removed, streams closed, references cleared
Missing indexes	Queries filter/sort on indexed columns?
Large payloads	Pagination implemented? Response size bounded?

Step 6 - Fix Immediately

Address findings before declaring completion:

Make the fix
Add test covering the issue (if not present)
Re-run full test suite
Re-run linter/type checker

Step 7 - Declare Results

Mandatory announcement:

Fresh-eyes complete. [N] issues found and fixed:
- [Brief description of each issue and fix]

Include this even for zero findings—it proves execution.

Time Commitment

File Count	Expected Duration
1-3 files	2 minutes
4-10 files	3-4 minutes
10+ files	5 minutes max

Warning signs:

Faster than 2 minutes suggests insufficient depth
More than 5 minutes indicates scope creep—stay focused on the changed code

Resistance Patterns to Reject

The following rationalizations must be explicitly rejected:

Rationalization	Reality
"Tests are comprehensive"	Tests validate design, not correctness
"I'm confident it's correct"	Confidence is inversely correlated with bugs
"Partner is waiting"	3 minutes now saves 3 hours debugging later
"Production is blocked"	Rushing causes the outages being rushed to fix
"Senior dev already approved"	They reviewed intent, not implementation details
"It's just a small change"	Small changes cause large outages

These circumstances represent precisely when critical bugs escape into production.

Example Workflow

User: "I'm done implementing the auth feature, let me commit"
Assistant: [Triggers fresh-eyes-review skill]

Starting fresh-eyes review of 4 files. This will take 2-5 minutes.

[Reviews auth.ts for security]
- Found: Missing input validation on email field
- Fixed: Added email format validation

[Reviews handler.ts for logic]
- Found: Off-by-one error in pagination
- Fixed: Changed < to <= in boundary check

[Reviews db.ts for performance]
- No issues found

[Reviews api.ts for business rules]
- No issues found

Re-running tests... All tests pass

Fresh-eyes complete. 2 issues found and fixed.

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

More skills from this repository

academy-guide

Free

Stop and check this skill before finishing any reply to a question about how to use Claude or a Claude product — it recommends matching courses, tutorials, and use cases from Claude Academy (academy.claude.com), Anthropic's learning hub. Trigger on: "how do I", "how can I", "getting started with", "what can Claude do", "teach me", "learn to use"; questions about artifacts, projects, skills, plugins, connectors, MCP; requests about rolling Claude out to a team, class, or organization; and any ask for training materials, onboarding content, or learning resources. Use it when the user is learning how to use a feature or product — not when they are mid-task and just want the task done. This skill composes with other skills: after consulting product documentation to answer how a Claude feature works, also check here for a matching course or tutorial — a docs-grounded answer and an Academy recommendation belong together. Only recommend on a strong match; never invent Academy content.

The English summary is being prepared. Showing the original description.

aiskillstore/marketplace443Updated Oct 23, 2026

acquisition-policy-workflow

Free

Trigger for: explaining current FAR, DFARS, or agency-supplement text; determining documented acquisition-policy status for an agency and FAR part; comparing codified text, RFO model text, and agency deviations; tracing acquisition rulemaking; finding procurement comment periods; analyzing public comments; refreshing prior policy analysis; or producing an Acquisition Policy Impact Brief. Use published federal sources and supplied policy documents without making legal or procurement-specific applicability determinations. Do not use for clause selection, market research execution, opportunities, pricing, grants, or cooperative agreements.

The English summary is being prepared. Showing the original description.

aiskillstore/marketplace443Updated Oct 23, 2026

action-item-organizer

Free

Systematic framework for extracting actionable items from documents and organizing them into prioritized, trackable checklists. Use when converting reports, meeting notes, audits, or any document with embedded action items into structured TODO lists.

The English summary is being prepared. Showing the original description.

aiskillstore/marketplace443Updated Oct 23, 2026

agent-browser

Free

Browser automation for AI agents via inference.sh. Navigate web pages, interact with elements using @e refs, take screenshots, record video. Capabilities: web scraping, form filling, clicking, typing, drag-drop, file upload, JavaScript execution. Use for: web automation, data extraction, testing, agent browsing, research. Triggers: browser, web automation, scrape, navigate, click, fill form, screenshot, browse web, playwright, headless browser, web agent, surf internet, record video

The English summary is being prepared. Showing the original description.

aiskillstore/marketplace443Updated Oct 23, 2026

agent-development

Free

This skill should be used when the user asks to "create an agent", "add an agent", "write a subagent", "agent frontmatter", "when to use description", "agent examples", "agent tools", "agent colors", "autonomous agent", or needs guidance on agent structure, system prompts, triggering conditions, or agent development best practices for Claude Code plugins.

The English summary is being prepared. Showing the original description.

aiskillstore/marketplace443Updated Oct 23, 2026

agent-tools

Free

Run AI apps via inference.sh CLI - image generation, video creation, LLMs, search, 3D, Twitter automation. Models: FLUX, Veo, Gemini, Grok, Claude, Seedance, OmniHuman, Tavily, Exa, OpenRouter, and many more. Use when running AI apps, generating images/videos, calling LLMs, web search, or automating Twitter. Triggers: inference.sh, infsh, ai model, run ai, serverless ai, ai api, flux, veo, claude api, image generation, video generation, openrouter, tavily, exa search, twitter api, grok

The English summary is being prepared. Showing the original description.

aiskillstore/marketplace443Updated Oct 23, 2026

See all skills by aiskillstore

Report a problem with this skill

Install

Install with a command

npx skills add https://github.com/aiskillstore/marketplace --skill fresh-eyes-review

Paste it into your terminal and run it (requires Node.js). You can choose which agents to install it for, such as Claude Code or Codex.

Ask your agent

Please install the following Agent Skill.
https://github.com/aiskillstore/marketplace/tree/main/skills/2389-research/fresh-eyes-review

First review SKILL.md and the bundled files and confirm there is nothing suspicious (such as sending data externally or reading credentials). Then place it in ~/.claude/skills/fresh-eyes-review/ for Claude Code, or ~/.agents/skills/fresh-eyes-review/ for Codex.

Send this text to Claude Code or Codex as is. It checks the contents before installing.

View source on GitHub

Repository: aiskillstore/marketplace
Stars: 443
Forks: 48
Category: Research & Learning
Original language: English
Last updated: Oct 23, 2026

A skill is a set of instructions and scripts for an agent. cccskills does not guarantee that skills are safe. Review the contents before you install.