| name | review-code |
| description | Perform AI code review analyzing pull requests for quality, security, and specification alignment. Use for PR reviews. |
Code Review Skill
Review code changes for quality, security, and spec alignment.
Instructions
- Analyze the code diff provided
- Check for code quality issues
- Identify security vulnerabilities
- Verify alignment with specifications
- Provide actionable feedback
Review Criteria
Code Quality
- Clean, readable code
- Proper error handling
- No obvious bugs or logic errors
- Appropriate use of language features
- DRY principle followed
Security
- No hardcoded secrets or credentials
- Input validation present
- No SQL injection, XSS, or other OWASP Top 10 vulnerabilities
- Secure authentication/authorization patterns
- Safe file operations
Spec Alignment
- Code implements the requirements
- Edge cases handled per spec
- API contracts match specification
- Test coverage for acceptance criteria
Best Practices
- Following project conventions
- Consistent code style
- Appropriate documentation
- Meaningful variable/function names
Output Format
## Summary
[One paragraph overall assessment]
## Issues Found
- [SEVERITY: critical/major/minor] [Issue description]
- File: path/to/file
- Line: X
- Suggestion: [How to fix]
## Approval Decision
[APPROVE if no critical/major issues, REQUEST_CHANGES otherwise]
## Comments
[Optional additional feedback]
Severity Definitions
- critical: Security vulnerabilities, data loss risks, breaking changes
- major: Bugs, spec violations, significant quality issues
- minor: Style issues, minor improvements, suggestions
