code-review

name	code-review
description	Review code for bugs, security vulnerabilities, performance issues, and maintainability. Trigger with "review this code", "check this PR", "look at this diff", "is this code safe?", or when the user shares code and asks for feedback.

Code Review

Structured code review covering security, performance, correctness, and maintainability. Works on diffs, PRs, files, or pasted code snippets.

Review Dimensions

Security

• SQL injection, XSS, CSRF
• Authentication and authorization flaws
• Secrets or credentials in code
• Insecure deserialization
• Path traversal
• SSRF

Performance

• N+1 queries
• Unnecessary memory allocations
• Algorithmic complexity (O(n²) in hot paths)
• Missing database indexes
• Unbounded queries or loops
• Resource leaks

Correctness

• Edge cases (empty input, null, overflow)
• Race conditions and concurrency issues
• Error handling and propagation
• Off-by-one errors
• Type safety

Maintainability

• Naming clarity
• Single responsibility
• Duplication
• Test coverage
• Documentation for non-obvious logic

Output Format

Rate each dimension and provide specific, actionable findings with file and line references. Prioritize critical issues first. Always include positive observations alongside issues.