code-review

name	code-review
description	Pre-commit code review protocol. Analyzes diffs for antipatterns, logical consistency, API safety, and structural issues. Use when asked to review code, check a diff, or before merging.

Code Review Protocol

When asked to review a piece of code or a Git diff, perform the following strict checks:

1. Logic & Correctness

• Does the code actually solve the original problem?
• Are there infinite loops (e.g., missing dependencies in useEffect)?
• Is state mutated directly instead of immutably?

2. Safety & Security

• Are API keys hardcoded? (They must be in environment variables).
• Is user input rendered directly to the DOM without sanitization (XSS risk)?
• Are API endpoints lacking authentication/authorization checks?

3. Maintenance & Cleanliness

• Are there excessive console.log statements?
• Is there duplicated logic that should be extracted into a utility function?
• Are the variable names descriptive and accurate?

4. Output

Provide a prioritized list of issues. Start with CRITICAL (must fix before commit), then WARNING (should fix), and end with NITS (minor stylistic suggestions).