code-review-mastery

Guide code reviews through security, clean code, and verification gates.

Updated Aug 6, 2025
One-click install
npx skills add https://github.com/flosrn/.claude --skill code-review-mastery
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-mastery
Source: https://github.com/flosrn/.claude/tree/main/skills/code-review-mastery
Command: npx skills add https://github.com/flosrn/.claude --skill code-review-mastery

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive framework for conducting effective code reviews, ensuring code quality, security, and maintainability throughout the development lifecycle.

Core Features & Use Cases

  • Structured Review Process: Guides reviewers on what to check (security, logic, clean code, metrics) and how to provide feedback.
  • Feedback Reception: Empowers developers to receive and act on feedback constructively.
  • Verification Gates: Enforces evidence-based completion claims, preventing premature declarations of success.
  • Use Case: When a developer submits a Pull Request, this Skill can be invoked to ensure the review process adheres to best practices, catching potential bugs, security flaws, and maintainability issues before merging.

Quick Start

Use the code-review-mastery skill to review the provided code changes, focusing on security and logic first.

Frequently Asked Questions about code-review-mastery

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I structure a pull request review to catch security flaws and maintainability issues?

Structure a pull request review by checking security based on OWASP standards, evaluating logic, enforcing SOLID clean code principles, and tracking code metrics before approving. This methodology ensures potential bugs and security flaws are caught before merging.

What is the best way to provide constructive feedback during a code review?

Provide constructive code review feedback using established interaction patterns that focus on evidence and verification gates. This ensures developers receive actionable input on clean code and security without premature declarations of task completion.

How do I enforce evidence-based completion claims in a development workflow?

Enforce evidence-based completion claims by applying verification gates that require deterministic task execution proof. This prevents premature success declarations by ensuring reviewers validate security checks, logic, and metrics before a pull request is merged.

Does this code review methodology require specific framework dependencies to function?

No, this code review methodology requires no specific framework dependencies to function. It provides a standalone structured framework covering OWASP security, SOLID clean code principles, and feedback patterns applicable across any development workflow.

When should I apply SOLID principles and OWASP security checks in a code review?

Apply SOLID principles and OWASP security checks during the initial pull request review phase. Prioritizing security and logic first ensures maintainability issues and vulnerabilities are identified early in the development lifecycle before verification gates.

Why do I need verification gates before declaring a code review task complete?

Verification gates are needed before declaring a code review complete to enforce evidence-based validation of security, clean code metrics, and logic. This prevents premature success declarations and ensures deterministic task execution across the development workflow.