메뉴
Pre-commit code review for Python/Django, React/TypeScript, and Rust projects. Checks for bugs, security issues, performance problems, and code quality. Invoke manually with /code-review before committing.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | code-review |
| description | Pre-commit code review for Python/Django, React/TypeScript, and Rust projects. Checks for bugs, security issues, performance problems, and code quality. Invoke manually with /code-review before committing. |
Pre-commit review focused on bugs, security, performance, and quality for Python/Django, React/TypeScript, and Rust codebases.
Run git diff --cached --stat (staged) and git diff --stat (unstaged).
If nothing is staged, ask the user what to review.
List files to review grouped by language.
Launch a Sonnet sub-agent via Task tool (model: "sonnet", subagent_type: "general-purpose").
Pass file paths and diffs only — do NOT share your own impressions.
Sub-agent prompt:
Review the following code changes. Read each file and its diff carefully.
For each issue found, report:
- Category: BUG / SECURITY / PERF / QUALITY
- File and line number
- Description of the issue
- Suggested fix
At the end, give a verdict: APPROVE or REQUEST_CHANGES.
Language-specific focus:
- Python/Django: SQL injection via raw queries, missing auth decorators, N+1 queries in views/serializers, unvalidated user input, missing migrations
- React/TypeScript: XSS via dangerouslySetInnerHTML, missing dependency arrays in hooks, unhandled promise rejections, prop type mismatches
- Rust: unwrap() in non-test code, missing error propagation, unsafe blocks without justification, unbounded allocations
Files to review:
<file list with paths>
While the sub-agent runs, independently review the same changes yourself with the same criteria.
Compare both sets of findings:
Present findings to the user:
## Code Review
**Verdict**: APPROVE | REQUEST_CHANGES
### Issues
| # | Severity | Category | Location | Issue | Suggestion |
|---|----------|----------|----------|-------|------------|
### Verified (no issues)
- <list of reviewed files with no problems>
Severity levels:
Offer to fix critical issues automatically. After fixing, re-run review (max 2 iterations). Do NOT commit — leave that to the user.
Create a structured implementation plan for a feature request. Covers architecture, system design, module design, pattern selection, and milestone-based task planning with DoD. Use when the user describes a new feature, significant change, or multi-step implementation task.
Execute an implementation plan milestone-by-milestone. Reads the plan, reviews lessons, then implements tasks using agents for parallelizable work. Invoke with /scrum-implement <plan-file-path> or triggered when the user asks to implement/execute a plan.
Extract lessons from a retrospective and review skills/agents for improvements. Creates lesson files in ~/Claude/lessons/ and suggests concrete changes to scrum skills. Invoke with /scrum-lessons <retrospective-path> or after running /scrum-retro.
Generate a sprint retrospective from a plan file and tech lead feedback. Analyzes what was planned vs what was built, identifies root causes, and produces actionable takeaways. Invoke with /scrum-retro <plan-file-path> or triggered when the user asks to create a retrospective.
Temporal Python SDK (`temporalio`) patterns, determinism rules, error handling, and testing. Trigger: When writing Temporal workflows, activities, or workers in Python, or when the user mentions Temporal, durable workflows, or the Python SDK in the context of workflow orchestration. Activated when working on files importing `temporalio`, `@activity.defn`, `@workflow.defn`, in directories named `temporal_app/`, `workflows/`, `activities/`, or when user asks about Temporal concepts, determinism, replay, signals, or activity patterns.
Set up a new Python/Django project with uv, ruff, basedpyright, pre-commit hooks, Justfile, Docker Compose, and CI. Invoke when starting a new Python project or when asked to set up project tooling.