second-opinion
Audited by Runlayer on Feb 22, 2026
Malicious tool definition detected
Tool: SKILL.md [1/2] Description: --- name: second-opinion description: "Runs external LLM code reviews (OpenAI Codex or Google Gemini CLI) on uncommitted changes, branch diffs, or specific commits.
Tool: SKILL.md [2/2] Description: diff | `git diff <branch>...HEAD` | | Specific commit | `git diff <sha>~1..<sha>` | ## Running Both When the user picks "Both" (the default): 1.
Malicious tool definition detected
Tool: references/codex-invocation.md Description: # Codex CLI Invocation ## Default Configuration - Model: `gpt-5.3-codex` - Reasoning effort: `xhigh` ## Approach Use `codex exec` in headless mode with the published code review prompt, structured JSON output, and `-o` (`--output-last-message`) to capture only the final review.
Malicious tool definition detected
Tool: references/codex-review-schema.json Description: { "type": "object", "properties": { "findings": { "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "maxLength": 80 }, "body": { "type": "string", "minLength": 1 }, "confidence_score": { "type": ["number", "null"], "minimum": 0, "maximum": 1 }, "priority": { "type": "integer", "minimum": 0, "maximum": 3 }, "code_location": { "anyOf": [ { "type": "object", "properties": { "file_path": { "type": "string
Malicious tool definition detected
Tool: references/gemini-invocation.md Description: # Gemini CLI Invocation ## Default Configuration - Model: `gemini-3.1-pro-preview` - Extensions: `code-review`, `gemini-cli-security` ## Key Flags | Flag | Purpose | |------|---------| | `-p <prompt>` | Non-interactive (headless) mode | | `--yolo` / `-y` | Auto-approve all tool calls | | `-m <model>` | Model selection | | `-e <ext>` | Load specific extension(s) | ## Scope-to-Diff Mapping Gemini does not have built-in scope flags like Codex.