code-review

name	code-review
description	Review pull request diffs for correctness, security, and style. Use when assessing a code change.
compatibility	Requires git and gh CLI
metadata	{"author":"dx-team","version":"1.0"}

Code Review

Review pull request diffs to identify bugs, security issues, and style violations.

When to Use This Skill

Use when the user asks to review a PR, check recent changes, or audit code for quality issues.

Implementation Steps

Step 1: Get the Diff

Fetch the diff for the PR or branch:

gh pr diff $PR_NUMBER

Or for local changes:

git diff main...HEAD

Step 2: Analyze Changes

For each changed file, check for:

• Logic errors: off-by-one, null dereference, unchecked returns
• Security: SQL injection, XSS, hardcoded secrets, path traversal
• Style: naming conventions, import ordering, line length
• Tests: new functions without test coverage

Step 3: Produce Review

Format findings as a structured review:

## file.py:42 — Error: Unchecked return value
The return value of `db.execute()` is ignored. If the query fails,
the function continues with stale data.

**Suggestion:** Add error handling:
\`\`\`python
result = db.execute(query)
if result.error:
    raise DatabaseError(result.error)
\`\`\`