Reviews pull requests for compliance regressions. Scans code diffs for security and compliance violations, flags issues, and suggests fixes aligned with frameworks like SOC 2, ISO 27001, NIST 800-53.
SkillScore95Maintained
Automatic
◆Security & AppSec pack
Last verified 8/23/2026
What it changes
Passed 21 of 22 test cases with the skill, and 13 of 22 without it.
Without skill59%
With skill95%
Checks it passed that the model alone missed
The output mentions Privilege Escalation
The output mentions plugins/grc-engineer/scripts/review-pr.js
The output contains node plugins/grc-engineer/scripts/review-pr.js gitlab-org/microservice 15 SOC2
and 5 more in the full report
8 fixed13 passed either way1 still failing0 broke
Pass-rate lift
+36 pp
Tokens
-13%
Agent turns
0%
Response time
-50%
Model gemini-3.6-flashMeasured 8/23/2026v121 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 8
Prompt
Run the compliance scanner script against pull request #500 in `healthtech/patient-portal` using HIPAA as the framework argument.
What was checked, without and with the skill
Checked
Without skill
With skill
The output contains the command node plugins/grc-engineer/scripts/review-pr.js healthtech/patient-portal 500 HIPAA
Missed
Passed
case-09 · gemini-3.6-flash · 8/23/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md79 linessingle file
Audit-Ready PR Reviewer
Reviews GitHub/GitLab pull requests specifically for compliance regressions. Shifts compliance "left" into the developer's daily workflow.