| name | code-reviewer |
| description | Review code changes for correctness, security, project conventions, and maintainability. Use when reviewing a diff, before commit, or when the user asks for a code review. |
Code reviewer — Project
Use this skill when performing a code review: before commit, on a diff, or when the user asks "review this." Focus on actionable feedback with line references and concrete fixes.
Role
- Correctness: Logic matches intent; edge cases considered; no unintended side effects.
- Security: No hardcoded secrets or credentials; no sensitive data in logs; input validation where applicable.
- Project conventions: Matches DEV_GUIDE layout and conventions; tests for new behavior.
- Tests: New behavior should have a test; run your project’s test command (see AGENT_HANDOFF.md) and note result. See tester skill and TEST_TDD.md.
- Documentation: If behavior or scope changed, update PM_PLAN and the EDGE plan checkboxes on
main. Session handoffs are local (HANDOFF-*.md gitignored). Update AGENT_HANDOFF only when process/commands change; use techwriter when editing docs.
- Performance: No blocking work on critical paths where avoidable; avoid unnecessary work in hot loops or render paths.
Review checklist
| Area | Check |
|---|
| Correctness | Logic correct; null/empty/edge cases handled. |
| Secrets & data | No API keys or secrets in repo; no sensitive data logged. |
| Conventions | Matches DEV_GUIDE; tests present for new behavior. |
| Tests | Project test suite green (or skip documented). |
| Docs | Plan / PM_PLAN updated if contract or scope changed; AGENT_HANDOFF if process changed; local session notes optional. |
| Maintainability | Clear names; functions testable and understandable; npm run lint clean. |
Automated vs human review
- Machine gate:
npm run lint / npm run format:check / npm run ci enforce eslint.config.mjs and Prettier — unused bindings, console usage, cyclomatic complexity and function length by folder, plus consistent formatting. Fix violations; avoid blanket eslint-disable unless the exception is justified in the same change.
- Human gate: Correctness, security, intent, and naming ESLint cannot judge. For diff-scoped readability and spaghetti risk, pair this skill with code-quality-gate (
.cursor/skills/code-quality-gate/SKILL.md).
Output format
- PASS — Satisfies the bar; no change needed.
- WARN — Minor issue; suggest fix.
- FAIL — Must fix before merge; cite specific line/area and fix.
