ffp-code-review

Review code changes for FFP multi-tenant security and TypeScript standards.

Updated Oct 6, 2025
One-click install
npx skills add https://github.com/ChrisTregaskis/ffp --skill ffp-code-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ffp-code-review
Source: https://github.com/ChrisTregaskis/ffp/tree/main/.claude/skills/ffp-code-review
Command: npx skills add https://github.com/ChrisTregaskis/ffp --skill ffp-code-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manual code reviews are time-consuming, error-prone, and require deep expertise in project-specific standards. This Skill automates the enforcement of critical FFP project standards, ensuring multi-tenant security, architectural consistency, and code quality without human oversight.

Core Features & Use Cases

  • Automated Compliance Checks: Verifies adherence to FFP's multi-tenant security, British English, and architectural patterns.
  • Detailed Feedback: Provides structured, prioritised feedback with specific remediation examples.
  • Use Case: Before merging a pull request, use this Skill to automatically scan for security vulnerabilities, architectural deviations, and British English spelling errors, receiving a comprehensive report in minutes.

Quick Start

Use the ffp-code-review skill to review my changes

Frequently Asked Questions about ffp-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review checks for multi-tenant security and architectural compliance?

Automated code review enforces multi-tenant security patterns, architectural consistency, and quality standards without manual oversight. This Skill scans pull requests for RLS enforcement, tenant isolation, JWT claims handling, and architectural deviations, delivering a prioritised report with specific remediation examples in minutes.

What security vulnerabilities does automated code review catch in TypeScript projects?

Code review detects security vulnerabilities including improper RLS context in transactions, missing tenant_id checks, incorrect Cognito custom claims usage, inadequate input validation with Zod, and error handling gaps. It verifies tenant isolation and identifies JWT claims configuration issues.

Can I use automated code review to enforce architectural patterns across a codebase?

Yes. Code review verifies separation of concerns across Handler, Service, and Repository layers, ensuring domain-oriented architecture and consistency. It checks that code follows FFP project standards and architectural patterns during pull request reviews and branch assessments.

How does automated code review handle healthcare data compliance in multi-tenant applications?

Code review enforces healthcare data compliance by validating multi-tenant isolation, RLS enforcement, and secure JWT claims handling. It ensures tenant_id checks and proper transaction context to prevent cross-tenant data exposure in healthcare environments.

Does code review catch British English spelling and style inconsistencies in TypeScript?

Yes. Code review identifies British English spelling deviations and style non-conformance across TypeScript code. It provides specific feedback on language and formatting issues as part of the comprehensive quality report.

What's the best way to catch architectural and security issues before merging pull requests?

Automated code review scans pull requests for security vulnerabilities, architectural deviations, and quality issues before merge. It delivers structured feedback with prioritised findings and remediation examples, reducing manual review burden and human error.