A sanity check that runs before you commit. It looks for the stuff that passes tests but shouldn’t ship — SQL injection, XSS, race conditions, business logic that doesn’t match requirements, N+1 queries hiding in loops. ## Install bash /plugin marketplace add 2389-research/claude-plugins /plugin install fresh-eyes-review Auto-triggers before commits and PRs. ## How it works Four steps: announce what’s being reviewed, run through the checklist, fix anything found (re-running tests after each fix), declare results. If the whole thing takes less than two minutes, it wasn’t thorough enough. ## Why bother if tests pass Tests verify what you remembered to check. This catches what you didn’t. A passing test suite and a critical security bug coexist more often than anyone wants to admit.