backend-code-review

Identify and document backend code quality issues and security vulnerabilities.

14|11|Updated Dec 1, 2025
One-click install
npx skills add https://github.com/DauQuangThanh/hanoi-rainbow --skill backend-code-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: backend-code-review
Source: https://github.com/DauQuangThanh/hanoi-rainbow/tree/main/skills/backend-code-review
Command: npx skills add https://github.com/DauQuangThanh/hanoi-rainbow --skill backend-code-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Backend code review processes are often inconsistent and time-consuming, leading to undetected security gaps, performance bottlenecks, and architectural drift. This Skill standardizes and accelerates reviews by providing a comprehensive, repeatable framework that highlights critical issues, severity, and actionable remediation steps.

Core Features & Use Cases

  • Systematic evaluation of API design, data access patterns, authentication/authorization flows, error handling, logging, and security practices.
  • Generates detailed review reports with prioritized findings, severity ratings, and concrete recommendations for fixes.
  • Use cases include auditing server-side code, validating microservices interactions, and improving overall backend quality during code reviews or security audits.

Quick Start

Provide a backend code review for a given project and generate a detailed report with prioritized findings and actionable remediation steps.

Frequently Asked Questions about backend-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a structured backend code review for security vulnerabilities?

A structured backend code review identifies security vulnerabilities by systematically evaluating authentication flows, data access patterns, and API design. It enforces a multi-check evaluation across server-side code to produce a prioritized report with actionable remediation steps.

What is included in a backend code quality audit for microservices?

A backend code quality audit for microservices includes systematic evaluation of API design, architectural patterns, error handling, logging, and security controls. It validates microservice interactions and generates detailed review reports with severity ratings and concrete recommendations.

Does this code review approach work for both REST and GraphQL API design?

Yes, this code review approach works for both REST and GraphQL API design. It is applied to server-side applications across REST, GraphQL, and microservice architectures, covering API design, authentication flows, performance bottlenecks, and architectural concerns.

How do I identify performance bottlenecks during server-side code reviews?

To identify performance bottlenecks during server-side code reviews, you apply a multi-check evaluation covering data access patterns and architectural concerns. This process highlights critical performance issues and generates a prioritized report with actionable fixes.

Can I use this to audit authentication and authorization flows in my backend?

Yes, you can use this to audit authentication and authorization flows in your backend. The review framework systematically evaluates security practices, authentication flows, and data access patterns, producing a detailed report with severity ratings and concrete remediation steps.

What is the best way to standardize error handling and logging checks across backend applications?

The best way to standardize error handling and logging checks is to use a repeatable review framework that enforces a multi-check evaluation. This ensures consistent validation of error handling and logging practices, yielding prioritized findings and actionable recommendations.