| name | code-review |
| description | Perform thorough code reviews focusing on correctness, security, performance, and maintainability. Provide actionable feedback with specific line references and suggested fixes. |
Code Review
Systematic code review skill covering correctness, security, performance, and style.
Review Checklist
Correctness
- Logic errors and edge cases
- Error handling completeness
- Null/undefined safety
- Race conditions and concurrency issues
Security
- Input validation and sanitization
- SQL injection, XSS, CSRF vectors
- Secrets in code or logs
- Authentication and authorization checks
Performance
- N+1 query patterns
- Unnecessary allocations
- Missing indexes
- Inefficient algorithms (O(n²) where O(n) works)
Maintainability
- Function and variable naming
- Function length and complexity
- Code duplication
- Test coverage
Usage
Review the diff in PR #123
Focus on: security and performance
Skip: style issues (handled by linter)
Review src/auth/middleware.go
Pay special attention to: token validation logic