go-code-review

Automated code review tools scan Go files for security vulnerabilities like SQL injection, performance problems such as N+1 queries, and architectural violations. This skill applies static analysis to backend code during PR reviews, generating structured reports organized by severity to reduce manual review time.

Static analysis detects potential SQL injection, command injection, insecure patterns, and secrets exposure in Go code. It examines backend API and batch services to identify injection vectors and unsafe function usage before code reaches production.

Yes. Code review automation checks layer boundaries, validates dependency inversion, and ensures architectural alignment across your Go backend. It flags violations in organizational structure and inter-module dependencies to maintain architectural consistency.

Automated review detects N+1 queries, inefficient memory allocations, and suboptimal defer usage patterns in Go code. It highlights performance anti-patterns during development and PR reviews to guide optimization.

Yes. Git is a required dependency; the skill uses Git diff to extract and compare changes in Go files. This enables precise, diff-based review reporting for pull requests and quality gates.

The report provides structured findings organized by severity, highlighting security vulnerabilities, performance concerns, architectural issues, and coding convention violations in Go code. It includes specific locations and actionable feedback for developers.