code-review-wasp

Review Wasp application code for security, performance, and TDD compliance.

2|1|Updated Nov 24, 2025
One-click install
npx skills add https://github.com/ToonVos/empty-opensaas --skill code-review-wasp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-wasp
Source: https://github.com/ToonVos/empty-opensaas/tree/main/.claude/skills/code-review-wasp
Command: npx skills add https://github.com/ToonVos/empty-opensaas --skill code-review-wasp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates comprehensive code reviews for Wasp applications, catching Wasp-specific issues that generic tools miss. It ensures adherence to best practices, security, and performance standards, saving developer time and preventing bugs.

Core Features & Use Cases

  • Wasp-Specific Checks: Verifies import rules, type annotations, auth checks, and entity listings unique to Wasp.
  • Security & Performance: Identifies critical security vulnerabilities (e.g., missing auth, multi-tenant data leaks) and performance bottlenecks (e.g., N+1 queries).
  • TDD & Code Quality: Enforces Test-Driven Development compliance, test quality criteria, and SOLID/DRY principles.
  • Use Case: Before merging a pull request, use this Skill to automatically scan for Wasp-specific anti-patterns, security flaws, and ensure all operations have proper type annotations and auth checks.

Quick Start

Review the attached Wasp code for common issues, security vulnerabilities, and performance bottlenecks. Provide actionable feedback.

Frequently Asked Questions about code-review-wasp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code reviews for Wasp applications?

Automate Wasp code reviews by running comprehensive scans that enforce Wasp-specific patterns, security checks, and performance standards. This catches issues like missing auth checks, improper imports, type annotation gaps, and N+1 queries that generic linters miss, saving review time before merge.

What security issues does Wasp code review catch?

Wasp code review detects critical security flaws including missing authorization checks, multi-tenant data leaks, incorrect error sequencing (401, 404, 403, 400), and improper context access. It validates that all operations enforce proper auth boundaries and type safety.

Can I use code review automation with pull requests?

Yes. Use code review automation on pull requests to scan for Wasp anti-patterns, security vulnerabilities, and performance bottlenecks before merging. It also works for pre-commit checks and architectural reviews to enforce consistency across feature changes.

What performance checks does Wasp code review include?

Performance checks identify N+1 query problems, missing pagination, and improper memoization patterns in Wasp operations. These optimizations prevent database bottlenecks and ensure scalable application design aligned with best practices.

Does code review enforce Test-Driven Development compliance?

Yes. Code review validates TDD compliance and test quality criteria alongside SOLID and DRY principles. It ensures tests are present, properly structured, and aligned with Wasp patterns for maintainable codebases.

What Wasp-specific patterns does code review validate?

Code review validates Wasp import rules, strongly-typed context access, mandatory first-line auth checks, correct error sequencing, and proper entity pagination. It enforces architecture patterns documented in CLAUDE.md to maintain consistency.