code-review
Audited by Runlayer on Feb 21, 2026
Malicious tool definition detected
Tool: SKILL.md [1/2] Description: --- name: code-review description: Reviews Workers and Cloudflare Developer Platform code for type correctness, API usage, and configuration validity. Load when reviewing TypeScript/JavaScript using Workers APIs, wrangler.jsonc/toml config, or Cloudflare bindings (KV, R2, D1, Durable Objects, Queues, Vectorize, AI, Hyperdrive).
Tool: SKILL.md [2/2] Description: - TOML config in existing docs (only flag for new content) ## Output Format ``` **[SEVERITY]** Brief description `file.ts:42` — explanation with evidence (tool output, type error, config mismatch) Suggested fix: `code` (if applicable) ``` Severity: **CRITICAL** (security, data loss, crash) | **HIGH** (type error, wrong API, broken config) | **MEDIUM** (missing validation, edge case, outdated pattern) | **LOW** (style, minor improvement) End with a summary count
Malicious tool definition detected
Tool: references/common-patterns.md [1/2] Description: # Common Patterns — What to Verify Do not memorize patterns. Retrieve current examples from Cloudflare docs and verify code against the current type definitions. This file describes _what to check_, not _what the code should look like_.
Tool: references/common-patterns.md [2/2] Description: Flag examples that implement full auth flows when the page topic is something else.
Malicious tool definition detected
Tool: references/workers-types.md Description: # Workers Types ## How to Retrieve Current Types Prefer generated types over baked-in knowledge. Types change with compatibility dates and new bindings.
Malicious tool definition detected
Tool: references/wrangler-config.md Description: # Wrangler Config Validation ## Schema Retrieval The authoritative schema is bundled with the `wrangler` npm package as `config-schema.json`. It is a JSON Schema (draft-07) document defining the full `RawConfig` type.