| name | review |
| description | Review backend code for bugs, security vulnerabilities, performance issues, and best practices. Use when the user asks for code review, wants to check code quality, or says "review". |
| allowed-tools | Read, Grep, Glob |
| metadata | {"tier":"default","cost":"light","side_effects":"none"} |
Review the following backend code thoroughly:
$ARGUMENTS
Review checklist
Please check the code against these criteria:
Security
- SQL injection, command injection, XSS, CSRF vulnerabilities
- Input validation and sanitization
- Authentication/authorization issues
- Sensitive data exposure (passwords, keys, tokens in code)
Performance
- N+1 query problems
- Missing database indexes
- Unnecessary loops or redundant computations
- Memory leaks or resource not properly closed
Code quality
- SOLID principles compliance
- Error handling completeness (try-catch, null checks)
- Naming conventions and readability
- Code duplication (DRY)
Reliability
- Edge cases and boundary conditions
- Concurrency/thread safety issues
- Transaction management
- Proper logging
Output format
For each issue found, provide:
- Severity: Critical / Warning / Suggestion
- Location: file:line_number
- Problem: What's wrong
- Fix: How to fix it with code example
