Code Review Skill

Goal

Produce a structured, actionable code review covering: security vulnerabilities, performance issues, architectural violations, and code style — in that priority order.

Steps

1. Gather diff

   • Run git diff main...HEAD (or the target branch) to see all changes
   • Note the files changed and their layers (domain, application, infrastructure, etc.)

2. Security review (highest priority)

   • Scan for: SQL injection, XSS, CSRF, path traversal, command injection
   • Check: secrets or API keys hardcoded in code
   • Check: authentication/authorization logic bypasses
   • Check: input validation at system boundaries (HTTP, file upload, CLI)
   • Check: npm audit / composer audit output for new vulnerable deps
   • Flag severity: CRITICAL | HIGH | MEDIUM | LOW