isms audit expert vs GStack Review vs Git Shiproom

Best first pick for high-signal PR review. It reads the actual diff instead of re-summarizing the whole repo, so the review stays grounded in code that changed. Strongest on trust-boundary cases — SQL injection, auth checks, conditional side-effects — where surface reviewers usually miss the failure mode. Skip it for pure style nits; bring in a linter instead. Try it on a feature branch before relying on it for hot-fix gating.

高信号 PR 评审的首选。它读的是 diff 本身，而不是把整个仓库重新总结一遍，所以评审会落在真正变化的代码上。最擅长信任边界类问题——SQL 注入、鉴权检查、条件分支副作用——这些在浅层评审里最容易漏掉。纯样式问题别用它，丢给 linter 更划算。建议先在普通 feature 分支上验过一次，再放到 hot-fix 流程里用。

Best for the narrow gap between "my branch is ready" and "a reviewer can pick it up cold." Runs a pre-flight: dependency drift, missing tests for the changed files, commits that don't match the PR title, and writes a handoff note your reviewer can read in 60 seconds. It is not a code reviewer — it does not audit logic. Use it as the last thing before requesting review, not as a replacement for review itself.

专门覆盖「我这个分支可以合了」到「评审者能冷启动接手」之间那段窄缝。会跑一遍发布前检查：依赖漂移、改动文件缺没缺测试、commit 标题和 PR 描述对不对得上，然后生成一份评审者能 60 秒读完的交接说明。它不是代码评审器——不审查逻辑。当作请求评审前的最后一步用，别拿它代替评审本身。