cloudbase-code-review

Validate CloudBase project auth, database, and storage configurations.

1.1k|133|Updated May 23, 2025

Search Tags:#code review #linting #security #authentication #postgresql #cloudbase

Ready to run

npx skills add https://github.com/TencentCloudBase/CloudBase-AI-Toolkit --skill cloudbase-code-review-tencentcloudbase

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cloudbase-code-review
Source: https://github.com/TencentCloudBase/CloudBase-AI-Toolkit/tree/main/config/source/skills/cloudbase-code-review
Command: npx skills add https://github.com/TencentCloudBase/CloudBase-AI-Toolkit --skill cloudbase-code-review-tencentcloudbase

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill prevents common implementation errors in CloudBase projects, such as auth guard misconfigurations, database schema issues, and storage security vulnerabilities, before they reach production.

Core Features & Use Cases

Automated Linting: Executes regex-based checks to catch deprecated API usage, incorrect SDK initialization, and insecure configuration patterns.
Semantic LLM Review: Provides deep architectural analysis for complex logic like RLS policies, route guards, and database access patterns.
Use Case: After implementing a new authentication flow or database schema, run this Skill to ensure your code adheres to security best practices and avoids known SDK pitfalls.

Quick Start

Run the cloudbase-code-review skill to scan the current project directory for potential security and configuration issues.

Frequently Asked Questions about cloudbase-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I check my CloudBase project for security and configuration errors?▼

To check a CloudBase project for security and configuration errors, run an automated validation Skill that uses static linting and semantic analysis to identify auth, database, and storage issues before production.

What is the best way to validate Row Level Security policies and auth guard configurations?▼

Validating RLS policies and route guards requires semantic LLM review, which provides deep architectural analysis for complex database access patterns and ensures your code adheres to security best practices.

Does this code review tool support MiniProgram and CloudRun environments?▼

Yes, this code review tool supports Web, MiniProgram, Node.js, and CloudRun environments, ensuring compliance with SDK best practices, RLS policies, and security domain requirements across these platforms.

How do I find deprecated API usage and incorrect SDK initialization in my codebase?▼

To find deprecated API usage and incorrect SDK initialization, execute automated regex-based linting checks that scan your project directory for insecure configuration patterns and known SDK pitfalls.

Can I use this to catch PostgreSQL database schema issues before deployment?▼

Yes, you can catch PostgreSQL database schema issues before deployment by running automated validation that identifies database configuration errors and ensures schema compliance through static and semantic checks.

When should I run an automated code review for my serverless backend?▼

You should run an automated code review after implementing a new authentication flow or database schema to ensure your serverless backend adheres to security best practices and avoids known SDK pitfalls.