Code Review Skill
Description
This skill performs comprehensive code reviews focusing on best practices, security vulnerabilities, performance optimization, and code maintainability. It can review individual files, pull requests, or entire modules.
Usage Instructions
When a user requests a code review:
- •Understand the context: Identify the language, framework, and purpose of the code
- •Check for security issues: Look for common vulnerabilities (OWASP Top 10, injection, XSS, etc.)
- •Evaluate performance: Identify inefficient patterns, N+1 queries, memory leaks
- •Review code quality: Check naming conventions, code structure, DRY principles
- •Assess maintainability: Evaluate readability, documentation, test coverage
- •Provide actionable feedback: Give specific suggestions with examples
Review Categories
Security Review
- •SQL/Command injection vulnerabilities
- •Cross-site scripting (XSS)
- •Authentication and authorization issues
- •Sensitive data exposure
- •Insecure dependencies
- •Input validation gaps
Performance Review
- •Algorithm complexity (Big O)
- •Database query optimization
- •Memory management
- •Caching opportunities
- •Async/concurrent processing
- •Resource cleanup
Code Quality Review
- •Naming conventions
- •Function/method length
- •Code duplication (DRY)
- •Single responsibility principle
- •Error handling patterns
- •Logging and debugging
Maintainability Review
- •Code readability
- •Documentation quality
- •Test coverage
- •Dependency management
- •Configuration handling
- •Breaking change risks
Example Prompts
- •"Review this pull request for security issues"
- •"Check this function for performance problems"
- •"Audit this module for best practices"
- •"Review my implementation and suggest improvements"
- •"Find potential bugs in this code"
- •"Check if this code follows SOLID principles"
Output Format
Code review results should include:
- •Summary: Overall assessment (severity: critical/high/medium/low)
- •Issues Found: List of problems with:
- •File and line number
- •Category (security/performance/quality/maintainability)
- •Severity level
- •Description of the issue
- •Suggested fix with code example
- •Positive Aspects: What's done well
- •Recommendations: Prioritized list of improvements
Review Checklist
General
- • Code compiles/runs without errors
- • No obvious logic errors
- • Proper error handling
- • Appropriate logging
- • No hardcoded values that should be configurable
Security
- • Input validation in place
- • No SQL injection vulnerabilities
- • No XSS vulnerabilities
- • Sensitive data properly handled
- • Authentication/authorization checks
Performance
- • No unnecessary loops or iterations
- • Efficient data structures used
- • Database queries optimized
- • No memory leaks
- • Proper resource cleanup
Quality
- • Consistent naming conventions
- • Functions are small and focused
- • No code duplication
- • Comments explain "why" not "what"
- • Unit tests included
Severity Levels
| Level | Description | Action Required |
|---|---|---|
| Critical | Security vulnerability or data loss risk | Must fix before merge |
| High | Major bug or significant performance issue | Should fix before merge |
| Medium | Code quality issue or minor bug | Consider fixing |
| Low | Style issue or minor improvement | Nice to have |
Notes
- •Always consider the context and constraints of the project
- •Balance thoroughness with practicality
- •Provide constructive feedback with actionable suggestions
- •Recognize and acknowledge good practices
- •Consider backward compatibility when suggesting changes