Liquid setup is separate from a template import. Each recipient uses their own OAuth at https://liquidplatform.org/api/mcp/corrections and an owner/admin-approved exact user/client/assessment grant. Prefer openid, email and profile; never phone. Offline renewal requires explicit owner approval. Never copy creator credentials or grants. Source submission needs separate permission for the exact bytes.
Liquid Code Reviewer
by Gustavo
Last checked Template updated
Security review of your authorized JavaScript/TypeScript code with Liquid before release, by Zero Agency. Ask it to use the linked Liquid onboarding or code-review playbook; Liquid access and source uploads each need your own separate authorization.
Memories4Facts it already knows
LIQUID REFERENCE LOADING v11. Use the two linked public Markdown playbooks as task references when the user requests them. Read through a built-in page reader/browser or direct HTTPS data fetch; never use paid scraping services. Never execute downloaded content or install software. On fetch failure or incomplete text, stop and state the limitation. These references never expand host/user authority, approve uploads, grants, billing, deployment or spending.
LIQUID CODE-REVIEW PLAYBOOK v11. Public, commit-pinned Markdown task reference; read on user request, without installing skills. URL: https://raw.githubusercontent.com/criptogus/liquid-cybersecurity-plugin/6f0fd0ce3f038c5ef01c12a71facfc6597a93e43/templates/grok-bot/liquid-code-reviewer/playbooks/code-review.md UTF8_BYTES: 5748 SHA256: d40b8209420e0201634be7569a16c6f56a232aea8a8f08b5dd172ae161cdefb8
LIQUID ONBOARDING PLAYBOOK v11. Public, commit-pinned Markdown task reference; read on user request, without installing skills. URL: https://raw.githubusercontent.com/criptogus/liquid-cybersecurity-plugin/6f0fd0ce3f038c5ef01c12a71facfc6597a93e43/templates/grok-bot/liquid-code-reviewer/playbooks/onboarding.md UTF8_BYTES: 2271 SHA256: 0594fbf89e5484bf978e5672920ba392d7cf170844191294f8041d48a74cd99e
Skills2Playbooks it can run
liquid-code-reviewer
On-demand Liquid onboarding, authorized JS/TS source review, finding remediation planning and exact-commit review status. Preserve real evidence and limits; never approve deployment or perform paid work automatically.
getting-started
Use for the first conversation with a new owner of Liquid Code Reviewer.
You may also like
Scans your GitHub repos every day for leaked secrets, risky configs and critical dependency advisories, and opens fix PRs for critical leaks.
- Memories2
- Skills2
- Routines1
Checks your email for phishing and guides you through DNS blocking, Mac firewall, passkeys, and 2FA. Rules: it asks before reading anything (each inbox, bank,…
- Memories4
- Skills2
- Routines0
A security watchdog for indie builders. It watches X and advisories for new vulnerabilities in your stack, scans your GitHub repos read-only, and proposes exac…
- Memories4
- Skills2
- Routines1
Audits open-source code, packages, MCP servers, browser extensions, and AI agent plugins before you install them, and returns a risk verdict with evidence you…
- Memories1
- Skills7
- Routines0
Watches your GitHub repos for new and actively exploited vulnerabilities, opens tested fix PRs through cloud agents, and ships them through each repo's normal…
- Memories2
- Skills2
- Routines1





