skills.rest
xmark168
xmark168COMMUNITY
Explore all skills by this author →
WebsiteGitHub

code-review

Analyze code for correctness, security vulnerabilities, and performance optimizations.

4|1|Updated Sep 21, 2025
Search Tags:#code quality#code review#best practices#security audit#performance optimization#vulnerability detection
One-click install
npx skills add https://github.com/xmark168/VibeSDLC --skill code-review-xmark168
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/xmark168/VibeSDLC/tree/main/backend/app/agents/developer/src/skills/general/code-review
Command: npx skills add https://github.com/xmark168/VibeSDLC --skill code-review-xmark168

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the need for thorough code quality assurance, identifying potential bugs, security vulnerabilities, and performance bottlenecks before code is committed or deployed.

Core Features & Use Cases

  • Code Auditing: Systematically review code against a comprehensive checklist covering correctness, security, performance, and quality.
  • Vulnerability Detection: Identifies common security flaws like SQL injection, XSS, and hardcoded secrets.
  • Performance Optimization: Suggests improvements for efficiency, such as avoiding N+1 queries and optimizing database indexing.
  • Use Case: Before merging a new feature branch, use this Skill to perform a detailed review of the code, ensuring it meets security standards and best practices.

Quick Start

Use the code-review skill to review the attached file 'user-auth.ts'.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on code before merging a feature branch?▼

A code audit systematically reviews code to identify security vulnerabilities like SQL injection, XSS, and hardcoded secrets before deployment. It validates adherence to coding standards and best practices across various languages and frameworks to ensure quality.

What is the best way to detect security vulnerabilities and performance bottlenecks in source code?▼

Detecting vulnerabilities and bottlenecks requires a comprehensive code review that analyzes code for correctness, injection flaws, improper authentication, inefficient database queries, and poor memory management to ensure quality and performance.

How do I optimize database queries and memory management during a code review?▼

Optimizing database queries and memory management involves analyzing code for performance bottlenecks during a review, suggesting improvements to avoid N+1 queries, and validating efficient database indexing against best practices.

Can I use automated code review to check for hardcoded secrets and improper authentication across different frameworks?▼

Yes, comprehensive code review analyzes code across various languages and frameworks to identify improper authentication, hardcoded secrets, and injection flaws, validating that the implementation meets security standards.

Does code review work with any programming language for vulnerability detection?▼

Code review validates adherence to coding standards and best practices across various languages and frameworks, systematically checking for correctness, security vulnerabilities, and performance optimizations.

What are the limitations of code review for identifying complex performance bottlenecks?▼

Code review suggests performance optimizations by analyzing code for inefficient database queries and memory management, but it relies on static analysis logic rather than runtime profiling to detect complex execution bottlenecks.

Related Skills

Explore More Software Engineering Skills→
EojEdredEojEdred

security-hardening

Scan code and configurations for security vulnerabilities and replay risks.

Community
Intermediate
brainbrewlabsbrainbrewlabs
7

code-fixing

Fix code scanner, security auditor, and linter issues with verified edits and reports.

Official
Intermediate
edulazaroedulazaro
12

lc:slow-queries

Analyze Laravel Eloquent and Query Builder usage to detect database performance bottlenecks.

Community
Intermediate
driftinglydriftingly
1

react-doctor

Analyze React source code for security, performance, correctness, and architecture issues.

Community
Intermediate