backend-review

Audits backend code against security, contract, and performance standards.

3|Updated Jul 1, 2026
One-click install
npx skills add https://github.com/KeyValueSoftwareSystems/maestro --skill backend-review-keyvaluesoftwaresystems
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: backend-review
Source: https://github.com/KeyValueSoftwareSystems/maestro/tree/main/skills/core/sdlc/backend-review
Command: npx skills add https://github.com/KeyValueSoftwareSystems/maestro --skill backend-review-keyvaluesoftwaresystems

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill eliminates inconsistent code reviews by providing a structured, deterministic checklist that ensures every backend implementation is vetted for security, performance, and contract adherence before it reaches production.

Core Features & Use Cases

  • Comprehensive Checklist: Automatically enforces reviews across critical dimensions including security, concurrency, backward compatibility, and observability.
  • Evidence-Based Reporting: Requires reviewers to provide specific code references and evidence for every finding, preventing vague feedback.
  • Use Case: A lead engineer uses this skill to perform a rigorous audit of a new API endpoint, ensuring that authz checks, rate limiting, and database migrations are handled correctly according to the team's LLD.

Quick Start

Run the backend-review skill against the current branch to generate a comprehensive audit report of the latest changes.

Frequently Asked Questions about backend-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce a consistent backend code review checklist for security and concurrency?

To enforce consistent backend code review, apply a deterministic, multi-dimensional checklist that vets implementations for security, concurrency, backward compatibility, and observability before production deployment.

Can I use automated code review for database migrations and authorization checks?

Automated code review can audit database migrations and authorization checks by evaluating branch diffs against defined technical specifications and strict architectural compliance standards.

What is the best way to prevent vague feedback during backend code reviews?

Preventing vague feedback requires an evidence-based reporting mechanism where reviewers must provide specific code references and evidence for every finding during the audit process.

Does read-only code review work for evaluating API endpoint compliance with LLD?

Read-only code review works for API endpoint compliance by performing a rigorous audit to ensure authz checks, rate limiting, and database migrations are handled correctly according to the defined LLD.