code-review

Identify quality, security, and architecture issues in Insites code reviews.

Updated Mar 18, 2026
One-click install
npx skills add https://github.com/insites-io/insites-logic-engine --skill code-review-insites-io
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/insites-io/insites-logic-engine/tree/main/skills_examples/code-review
Command: npx skills add https://github.com/insites-io/insites-logic-engine --skill code-review-insites-io

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps reviewers quickly assess Insites application changes for correctness, security, maintainability, and platform-specific architecture compliance without manually checking every pattern.

Core Features & Use Cases

  • Architecture Checks: Validates that pages, commands, partials, forms, and GraphQL follow Insites conventions.
  • Security Review: Flags XSS, injection, auth gaps, data exposure, and unsafe API usage.
  • Quality Guidance: Surfaces missing tests, duplication, naming issues, and i18n gaps with clear severity.
  • Use Case: Review a pull request for a new order flow and get prioritized findings plus remediation steps.

Quick Start

Ask the code-review skill to inspect the changed Insites files and return critical issues, warnings, suggestions, and approved items.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review Insites Liquid templates for security and architecture issues before shipping?

Review Insites Liquid templates by analyzing changed files for XSS, injection, and convention violations. The code review process flags quality, security, and architecture problems in pages, partials, and forms, returning prioritized findings with actionable remediation steps.

What is the best way to automate code review for Insites application pull requests?

Automate Insites code review by inspecting changed files in a pull request workflow. The review identifies missing tests, duplication, i18n gaps, and unsafe API usage, then classifies findings by severity to deliver actionable remediation guidance for application correctness and maintainability.

Does the code review process check Insites GraphQL files and forms for data exposure?

Yes, the code review process checks Insites GraphQL files and forms for data exposure and auth gaps. It validates that these files follow platform architecture conventions while flagging security vulnerabilities and unsafe API usage during the changed-file review workflow.

Can I catch missing test coverage and i18n gaps during an Insites code review?

Yes, you can catch missing test coverage and i18n gaps during an Insites code review. The review surfaces missing tests, duplication, naming issues, and internationalization content gaps with clear severity classifications to ensure application maintainability.

What types of severity classifications are applied to findings in an Insites code review?

Severity classifications applied to Insites code review findings include critical issues, warnings, and suggestions. Findings cover security vulnerabilities, architecture violations, and quality concerns, providing reviewers with prioritized, actionable remediation guidance for each changed file.

When do I need to enforce Insites platform conventions during a code review?

You need to enforce Insites platform conventions during a code review whenever changes involve pages, commands, partials, forms, or GraphQL files. The review validates architecture compliance and flags convention violations to prevent quality and security issues from shipping.