Tetra Scar Code Review

Code review that learns from failures. Reflex arc blocks repeat mistakes without LLM calls. Combines systematic checklist review (security, performance, corr...

This skill appears to do what it says: local, regex/heuristic code review plus a local scar database. Before installing or running it: (1) review the scar JSONL contents or configure the scar file location to a safe directory you control (to avoid unexpected blocks), (2) avoid importing or trusting scars from untrusted sources because regex patterns can trigger false blocks or cause heavy CPU (ReDoS) on large diffs, (3) run the tool in a sandbox or on non-production copy first to confirm behavior, and (4) note it writes review_scars.jsonl in your working directory by default, so back up any existing file you care about.

Type: OpenClaw Skill Name: tetra-scar-code-review Version: 0.1.0 The tetra-scar-code-review skill bundle is a legitimate static analysis tool designed to perform security, performance, and maintainability checks on source code. The core logic in scar_code_review.py uses regex-based heuristics to identify common vulnerabilities such as SQL injection, hardcoded secrets, and unsafe eval usage. It includes a 'reflex arc' feature that matches code against a local database of past misses (review_scars.jsonl). The code is well-documented, includes comprehensive tests (test_scar_code_review.py), and contains no evidence of data exfiltration, malicious execution, or harmful instructions.