reviewing-changes

Warn

Audited by Runlayer on Feb 23, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
14
Flagged
14
Chunks
19
Flagged Files (14)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: reviewing-changes version: 3.0.0 description: Guides Android code reviews with type-specific checklists and MVVM/Compose pattern validation. Use when reviewing Android PRs, pull requests, diffs, or local changes involving Kotlin, ViewModel, Composable, Repository, or Gradle files.

checklists/bug-fix.mdHIGH
78.3%

Malicious tool definition detected

Tool: checklists/bug-fix.md Description: # Bug Fix Review Checklist ## Multi-Pass Strategy ### First Pass: Understand the Bug <thinking> Before evaluating the fix: 1. What was the original bug/broken behavior? 2. What is the expected correct behavior? 3.

checklists/dependency-update.mdHIGH
78.3%

Malicious tool definition detected

Tool: checklists/dependency-update.md Description: # Dependency Update Review Checklist ## Multi-Pass Strategy ### First Pass: Identify and Assess <thinking> Before diving into details: 1. Which dependencies were updated? 2. What are the version changes? (patch, minor, major) 3.

checklists/feature-addition.mdHIGH
78.3%

Malicious tool definition detected

Tool: checklists/feature-addition.md [1/2] Description: # Feature Addition Review Checklist ## Multi-Pass Strategy ### First Pass: High-Level Assessment <thinking> Before diving into details: 1. What is this feature supposed to do? 2. How does it fit into the existing architecture?

Tool: checklists/feature-addition.md [2/2] Description: encryptedData = keystoreManager.encrypt(sensitiveData) secureStorage.store(encryptedData) ``` **If security concerns found, classify as CRITICAL using `reference/priority-framework.md`** ## Testing Review Reference: `reference/testing-patterns.md` **Required Test Coverage:** - **ViewModels**: Unit tests for state transitions, actions, error scenarios - **Repositories**: Unit tests for data transformations, error handling - **Business logic*

checklists/infrastructure.mdHIGH
78.3%

Malicious tool definition detected

Tool: checklists/infrastructure.md Description: # Infrastructure Review Checklist ## Multi-Pass Strategy ### First Pass: Understand the Change <thinking> Assess infrastructure change: 1. What problem does this solve? 2. Does this affect production builds, CI/CD, or dev workflow? 3. What's the risk if this breaks?

checklists/refactoring.mdHIGH
78.3%

Malicious tool definition detected

Tool: checklists/refactoring.md [1/2] Description: # Refactoring Review Checklist ## Multi-Pass Strategy ### First Pass: Understand the Refactoring <thinking> Analyze the refactoring scope: 1. What pattern is being improved? 2.

Tool: checklists/refactoring.md [2/2] Description: into shared code...

checklists/ui-refinement.mdHIGH
78.3%

Malicious tool definition detected

Tool: checklists/ui-refinement.md Description: # UI Refinement Review Checklist ## Multi-Pass Strategy ### First Pass: Visual Changes <thinking> Analyze the UI changes: 1. What visual/UX problem is being solved? 2. Are there designs or screenshots to reference? 3.

examples/review-outputs.mdHIGH
78.3%

Malicious tool definition detected

Tool: examples/review-outputs.md [1/2] Description: # Review Output Examples Well-structured code reviews demonstrating appropriate depth, tone, and formatting for different change types.

Tool: examples/review-outputs.md [2/2] Description: ## Recommendation **Conditional approval** with follow-up...

reference/architectural-patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/architectural-patterns.md [1/2] Description: # Architectural Patterns Quick Reference Quick reference for Bitwarden Android architectural patterns during code reviews.

Tool: reference/architectural-patterns.md [2/2] Description: not MutableStateFlow?

reference/priority-framework.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/priority-framework.md [1/2] Description: # Finding Priority Framework Use this framework to classify findings during code review. Clear prioritization helps authors triage and address issues effectively.

Tool: reference/priority-framework.md [2/2] Description: **data/sync/SyncManager.kt:134** - QUESTION: Should sync failures retry automatically?

reference/review-psychology.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/review-psychology.md Description: # Review Psychology: Constructive Feedback Phrasing Effective code review feedback is clear, actionable, and constructive.

reference/security-patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/security-patterns.md Description: # Security Patterns Quick Reference Quick reference for Bitwarden Android security patterns during code reviews.

reference/testing-patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/testing-patterns.md Description: # Testing Patterns Quick Reference Quick reference for Bitwarden Android testing patterns during code reviews.

reference/ui-patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/ui-patterns.md Description: # Compose UI Patterns Quick Reference Quick reference for Bitwarden Android Compose UI patterns during code reviews.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
14
Files Flagged
14
Chunks Analyzed
19
Analyzed
Feb 23, 2026, 12:36 PM
Security Audit — runlayer — reviewing-changes