ReviewEvo

PassAudited by ClawScan on May 1, 2026.

Overview

ReviewEvo is a coherent local code-review skill, but it will inspect repository history/files and persist a local learnings file for future runs.

Before installing, be comfortable with the agent reading your repository history and code and writing .review-evo/learnings.md. Use it in the intended repo only, review the stored learnings file, and avoid committing that file if it contains sensitive internal notes.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent will inspect local repository history and diffs, and an incorrect branch or repository context could lead to reviewing the wrong data.

Why it was flagged

The skill directs the agent to run local git/shell commands, including a user-provided branch diff. This is central to the review purpose and mostly read-only, but users should confirm the target repository and branch.

Skill content
Run each of these commands and capture the output... git log --oneline -50 ... git diff main...{branch}
Recommendation

Run it only in the intended repository, confirm branch names before diffing, and keep shell arguments constrained to git review tasks.

What this means

Prior review notes may influence future findings, and the learnings file could contain project-sensitive observations if it is shared or committed.

Why it was flagged

The skill stores and reuses a repository-local knowledge file. This is disclosed and purpose-aligned, but the file can carry stale, sensitive, or user-edited content into future reviews.

Skill content
Read `.review-evo/learnings.md` in full... Reference these throughout the review... Write (or append to) `.review-evo/learnings.md`
Recommendation

Review .review-evo/learnings.md periodically, remove stale or sensitive content, and consider adding it to .gitignore if the notes should remain private.