skills.rest
Thiago-Cruz-eng
Thiago-Cruz-engCOMMUNITY
Explore all skills by this author →
GitHub

code-reviewer

Identifies security vulnerabilities, performance problems, correctness defects and maintainability issues in source code during reviews.

Updated Dec 20, 2023
Search Tags:#code review#performance#security#sql injection#xss#maintainability#n+1 queries
One-click install
npx skills add https://github.com/Thiago-Cruz-eng/Hibrygame --skill code-reviewer-thiago-cruz-eng
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/Thiago-Cruz-eng/Hibrygame/tree/main/.claude/skills/code-reviewer
Command: npx skills add https://github.com/Thiago-Cruz-eng/Hibrygame --skill code-reviewer-thiago-cruz-eng

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It helps you review code for high-impact issues—especially security vulnerabilities, performance bottlenecks, correctness problems, and maintainability risks—before they ship.

Core Features & Use Cases

  • Priority-ordered review: Guides analysis in the order Security → Performance → Correctness → Maintainability → Testing to reduce oversight risk.
  • Concrete detection rules: Covers common high-severity patterns like SQL injection (unsafe query construction), XSS (unsanitized HTML rendering), and N+1 query inefficiencies.
  • Actionable remediation: Produces review output that includes file/line-level issue descriptions plus impact and fix guidance, with a checklist and reference links.

Quick Start

Ask the AI to review the provided codebase for security, performance (including N+1 query risks), correctness, and maintainability using the code-reviewer output format.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for SQL injection and XSS vulnerabilities?▼

To detect N+1 queries during code review, analyze ORM relationship loading within loops where data-access patterns repeatedly fetch related records. Identifying these performance bottlenecks helps prevent inefficient database interactions and provides specific remediation guidance for the detected loop structures.

What is the best way to structure a code review for security and performance?▼

Yes, you can review web backends and frontend rendering paths for security and performance. The review applies specifically to areas where user input reaches queries, HTML DOM sinks, or ORM relationship loading, targeting high-impact defects across these data flow boundaries.

How do I detect N+1 query problems in ORM relationship loading?▼

To detect N+1 queries during code review, analyze ORM relationship loading within loops where data-access patterns repeatedly fetch related records. Identifying these performance bottlenecks helps prevent inefficient database interactions and provides specific remediation guidance for the detected loop structures.

What is the best way to structure a code review for security and performance?▼

The best way to structure a code review is using a priority-ordered analysis: Security, Performance, Correctness, Maintainability, and Testing. This sequence reduces oversight risk by tackling high-severity vulnerabilities and performance bottlenecks before general maintainability issues.

Can I review web backend and frontend rendering code for security defects?▼

Yes, you can review web backends and frontend rendering paths for security and performance. The review applies specifically to areas where user input reaches queries, HTML DOM sinks, or ORM relationship loading, targeting high-impact defects across these data flow boundaries.

Related Skills

Explore More Software Engineering Skills→
Zangetsu101Zangetsu101
1

to-spec

Generate issue specifications from conversation context and codebase state.

Community
Advanced
ProjectEuropaProjectEuropa
4

wcag-audit-patterns

Identify WCAG 2.2 conformance issues and provide remediation guidance across web content.

Community
Advanced
nguyenphpnguyenphp
41

lint-and-validate

Run linters, type checkers, and security audits across Node.js and Python projects.

Community
Intermediate
GoldenWing-360GoldenWing-360
15

prompt-injection-defense

Tag untrusted content and enforce confirmation steps for LLM applications.

Official
Advanced