code-review

Evaluate .NET web API codebases for security, performance, and design best practices.

Updated Mar 26, 2026
One-click install
npx skills add https://github.com/tedtv1007-ctrl/milk-skills-library --skill code-review-tedtv1007-ctrl
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/tedtv1007-ctrl/milk-skills-library/tree/main/code-review
Command: npx skills add https://github.com/tedtv1007-ctrl/milk-skills-library --skill code-review-tedtv1007-ctrl

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the inconsistency and oversight common in manual code reviews by providing a structured, expert-vetted checklist for .NET web APIs.

Core Features & Use Cases

  • Comprehensive Checklist: Covers runtime safety, performance bottlenecks, and security vulnerabilities like injection or secrets exposure.
  • Architecture Alignment: Ensures code changes adhere to established design patterns and API contract standards.
  • Use Case: Use this skill when performing a pull request review to ensure that new Dapper queries are parameterized, HttpClient usage follows factory patterns, and error handling does not leak sensitive information.

Quick Start

Ask the AI to perform a code review on the provided C# file using the code-review skill checklist to identify potential security and performance issues.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security and performance code review for a .NET web API?

A .NET API code review systematically evaluates web API codebases to ensure adherence to security, performance, and design best practices. It validates implementation details such as parameterized SQL queries, proper HTTP status code usage, and robust HttpClient configuration.

What should I check in a pull request to prevent security vulnerabilities in C# APIs?

When reviewing C# API pull requests, check that Dapper queries are parameterized to prevent injection, verify HttpClient follows factory patterns, and ensure error handling does not leak sensitive information or expose secrets.

Does this code review checklist work for identifying technical debt in dotnet codebases?

Yes, this code review checklist targets architectural assessments and technical debt identification in dotnet codebases by ensuring code changes adhere to established design patterns and API contract standards.

Can I use this to verify proper HTTP status codes and HttpClient configuration in my C# code?

Yes, you can verify proper HTTP status code usage and robust HttpClient configuration in your C# code. The evaluation framework specifically validates these implementation details alongside runtime safety and performance bottlenecks.

What is the best way to standardize .NET API quality across multiple pull requests?

The best way to standardize .NET API quality is applying an expert-vetted checklist during pull request reviews to consistently enforce runtime safety, performance standards, and architectural alignment across all code changes.