Infrastructure Code Review

Run an infrastructure-focused review using 6 infrastructure checklists via the senior-review-specialist agent.

Instructions

Spawn the senior-review-specialist agent to perform this review.

Checklists to Apply

Load and apply these review checklists:

• •commands/review/infra.md - Deployment config, least privilege, operational clarity
• •commands/review/ci.md - Pipeline security, deployment safety
• •commands/review/release.md - Versioning, rollout, migration, rollback
• •commands/review/migrations.md - Database migration safety
• •commands/review/logging.md - Secrets exposure, PII leaks, wide-events
• •commands/review/observability.md - Logs, metrics, tracing, alertability

Agent Instructions

The agent should:

1. •Get working tree changes: Run git diff to see all changes
2. •Identify infrastructure files:
   • •Terraform, CloudFormation, Kubernetes manifests
   • •CI/CD pipelines (GitHub Actions, GitLab CI, etc.)
   • •Migration files, deployment scripts
   • •Logging and monitoring configuration
3. •For each changed file:
   • •Read the full file content
   • •Go through each diff hunk
   • •Apply all 6 infrastructure checklists
   • •Look for security misconfigurations and operational risks
4. •Cross-reference related files: Check environment configs, secrets handling
5. •Assess blast radius: What could go wrong in production?

Output Format

Generate an infrastructure review report with:

• •Critical Issues (BLOCKER): Security misconfigurations, deployment risks
• •High Priority Issues: Missing guardrails, cost explosions
• •Medium Priority Issues: Observability gaps, operational hazards
• •Infrastructure Map: Components, dependencies, deployment topology
• •Operational Readiness: Logging, alerting, rollback capabilities
• •File Summary: Infrastructure issues per file
• •Overall Assessment: Production readiness recommendation