| name | code-review |
| description | Code review knowledge. Use when reviewing an implementation against requirements, validating code quality, checking edge cases and security, or before opening a PR. |
| triggers | ["review","code review","pr review","validate","quality","lint check"] |
Code Review
Use this skill when reviewing code — whether a formal review pass, a self-check before delivery, or a "take a look at this" request. For an independent review, prefer running it in a fresh subagent context so the review is not biased by the implementation reasoning.
Review Process
For each repository with changes:
- Read the relevant skill to understand project conventions
- Verify the implementation matches the stated requirements
- Run build and lint commands
- Check for edge cases, error handling, and security
- Verify tests cover the important paths
What to check
- Correctness against the requirement (not just "does it run")
- Error handling, timeouts, and invalid input
- Security: injection, auth, secret handling, unsafe deserialization
- Consistency with existing patterns in the codebase
- Test coverage for the important paths
Documenting findings
Separate findings by repository:
### Repository: api
- [x] Matches requirements
- [x] Build passes
- [ ] Missing error handling in X endpoint
### Repository: frontend
- [x] ...
Mark items resolved as corrections are made.
