Find agent skills by outcome

- Check that memory read/write operations specify behavior for cold starts

missing keys

- Rank findings by the product of probability and blast radius

not by defect category or code location.

- Simulate edge-case user inputs mentally: empty queries

ambiguous phrasing

- Check that concurrent data structures (ConcurrentHashMap

channels

- Verify that test suites include concurrency stress tests

not just single-threaded happy-path coverage.

- Verify that every new variable is initialized before use on all code paths

including early returns and exception handlers.

- Check each branch condition for off-by-one

negation

- Start from the diff

not the entire codebase; focus analysis on changed lines and their immediate callers and callees.

- Verify health check endpoints accurately reflect service readiness

not just process liveness.

- Check for startup ordering dependencies between services

databases

- Identify zero-downtime deployment risks from schema changes

cache invalidation

- Assess data serialization and deserialization for version skew

missing fields

- Validate idempotency of operations that may be retried by queues

load balancers

- Check for data validation at trust boundaries: API inputs

file uploads

- Review every modified function for introduced null dereference

type mismatch

- Confirm that timeout

retry

- Assess infrastructure-as-code changes for resource sizing

scaling policy

- Error message information leakage exposing stack traces

internal paths

- Missing retry logic for transient failures in network calls

distributed locks

- Silent exception swallowing in catch blocks that neither log

re-throw

- Missing fallback behavior when an agent's required tool

memory store

- Memory leaks from accumulated event listeners

growing caches without eviction

- Data races on shared mutable state without locks

atomics

- Comparison errors: using identity instead of equality

floating-point epsilon failures