Run any Skill in Manus with one click

bug-review

Stars0

Forks0

UpdatedJuly 23, 2026 at 15:26

Review backend and frontend template code for real defects, boundary violations, security gaps, and missing tests. Auto-invoke for code reviews or bug investigations. Triggers: "bug review", "review code", "find bugs", "security audit", "check defects".

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

werlang

werlang/project-template

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Software Quality Assurance Analysts and TestersComputer and Mathematical Occupations·SOC 15-1253

SKILL.md

readonly

name	bug-review
description	Review backend and frontend template code for real defects, boundary violations, security gaps, and missing tests. Auto-invoke for code reviews or bug investigations. Triggers: "bug review", "review code", "find bugs", "security audit", "check defects".
argument-hint	Target directory, file, or bug report scope
user-invocable	true

Bug Review

Use this skill for code reviews, security audits, or defect investigations.

Review Priorities

Security & Authorization: Inspect auth middleware, token validation, password hashing, and endpoint authorization checks.
Boundary Violations: Ensure web/ (Mustache SSR, components, DOM) and api/ (Express routes, models, MySQL helpers) responsibilities remain strictly decoupled.
SQL & Filter Safety: Verify queries in api/helpers/postgres.js use parameterized statements and safe filter builders to prevent SQL injection.
DOM Ownership & Data Attributes: Confirm DOM access lives exclusively in web/src/js/components/ and no domain data is stored in data-* attributes.
API Contract Drift: Check camelCase JSON response contracts between API routes and frontend models.
Missing Regression Tests: Verify that bug fixes or behavior changes include automated tests to prevent regressions.
Rendering & UX Bugs: Check for browser-visible rendering flaws, unhandled promise rejections, missing localized error translations, and console errors.

Output Standard

Lead with findings ordered by severity (Critical, High, Medium, Low), including file and line citations (file:///path/to/file#L12-L34). If no issues are found, state that clearly and document any remaining automated test gaps.

More from this repository

same repository

api-development

werlang/project-template

Build or change API behavior in api/ using Express routers, middleware, CustomError, model instances, and camelCase JSON responses.

2026-07-230

entity-models

werlang/project-template

Implement OOP API entities in api/model/ using the shared Model base class and relation helper.

2026-07-230

postgres-helper

werlang/project-template

Maintain the api/helpers/postgres.js SQL boundary, CRUD helper surface, and safe filter conventions.

2026-07-230

ai-workflow-update

werlang/project-template

Update project-local agent guidance when architecture, workflows, commands, or conventions change. Auto-invoke when user or agent output indicates a reusable workflow or durable rule. Triggers: "update docs", "update skill", "create new skill", "update agent instructions", "document recurring pattern", "capture reusable workflow".

2026-07-230

document-touched-code

werlang/project-template

Add accurate JSDoc and focused comments when changing template code. Auto-invoke during code writing or refactoring. Triggers: "document code", "jsdoc", "code comments", "add comments", "explain logic".

2026-07-230

documentation-maintenance

werlang/project-template

Keep human docs, agent guidance, and touched code comments aligned with the real web/api implementation, compose workflow, and validation commands. Auto-invoke when auditing docs or after major architectural changes. Triggers: "audit docs", "check context", "documentation maintenance", "audit documentation", "verify docs".

2026-07-230

name	bug-review
description	Review backend and frontend template code for real defects, boundary violations, security gaps, and missing tests. Auto-invoke for code reviews or bug investigations. Triggers: "bug review", "review code", "find bugs", "security audit", "check defects".
argument-hint	Target directory, file, or bug report scope
user-invocable	true

Bug Review

Use this skill for code reviews, security audits, or defect investigations.

Review Priorities

Security & Authorization: Inspect auth middleware, token validation, password hashing, and endpoint authorization checks.
Boundary Violations: Ensure web/ (Mustache SSR, components, DOM) and api/ (Express routes, models, MySQL helpers) responsibilities remain strictly decoupled.
SQL & Filter Safety: Verify queries in api/helpers/postgres.js use parameterized statements and safe filter builders to prevent SQL injection.
DOM Ownership & Data Attributes: Confirm DOM access lives exclusively in web/src/js/components/ and no domain data is stored in data-* attributes.
API Contract Drift: Check camelCase JSON response contracts between API routes and frontend models.
Missing Regression Tests: Verify that bug fixes or behavior changes include automated tests to prevent regressions.
Rendering & UX Bugs: Check for browser-visible rendering flaws, unhandled promise rejections, missing localized error translations, and console errors.