baseweb-review

Review baseweb applications for security, performance, and code-quality issues.

1|Updated Feb 4, 2020
One-click install
npx skills add https://github.com/christophevg/baseweb --skill baseweb-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: baseweb-review
Source: https://github.com/christophevg/baseweb/tree/main/skills/review
Command: npx skills add https://github.com/christophevg/baseweb --skill baseweb-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you identify risky, inefficient, or non-idiomatic patterns in baseweb applications before they cause outages, vulnerabilities, or maintenance pain.

Core Features & Use Cases

  • Architecture review to validate project structure, resource registration patterns, and async/ASGI entry points.
  • Security assessment to check authentication/authorization usage, input validation, error handling, and secrets management.
  • Performance and testing review to flag N+1 query patterns, missing indexes/caching opportunities, and insufficient async test coverage.
  • Frontend review to evaluate Vue/Vuetify page/component structure, API error handling, and Socket.IO connection robustness.

Quick Start

Ask the AI to review your baseweb codebase by checking async correctness, security controls, performance hotspots, and frontend integration, then generate a structured report with critical issues, warnings, suggestions, and positives.

Frequently Asked Questions about baseweb-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Quart and Socket.IO application for security vulnerabilities?

Auditing a Quart and Socket.IO application for security involves checking authentication decorators, input validation, error handling, and secrets management. This process identifies risky non-idiomatic patterns in async routes and websocket handlers.

What does a baseweb code review cover for pre-deployment checks?

A baseweb code review for pre-deployment checks covers architecture, security, performance, and frontend integration. It validates project structure, flags N+1 query patterns, checks Vue/Vuetify components, and evaluates Socket.IO connection robustness to produce a structured report.

Can I check async route correctness and websocket handlers in my Quart project?

Yes, you can check async route correctness and websocket handlers in a Quart project. A review examines ASGI entry points and async handler logic to surface non-idiomatic patterns that could cause outages or maintenance pain.

How do I identify performance hotspots and missing test coverage in ASGI apps?

To identify performance hotspots and missing test coverage in ASGI apps, review code for N+1 query patterns, missing indexes, and caching opportunities. Evaluating async test coverage ensures websocket and route logic maintain robust performance under load.

Does this review evaluate Vue and Vuetify frontend integration patterns?

Yes, the review evaluates Vue and Vuetify frontend integration patterns. It assesses page and component structure, API error handling, and Socket.IO connection robustness to ensure the frontend communicates securely and efficiently with the backend.

When should I run a security and code-quality audit on my baseweb codebase?

You should run a security and code-quality audit on your baseweb codebase during refactoring, pre-deployment checks, or inheritance scenarios. This timing identifies inefficient patterns and vulnerabilities before they cause production outages or maintenance issues.