mage-review

Review Magento 2 code diffs for security, correctness, and performance risks.

2|3|Updated Mar 19, 2026
One-click install
npx skills add https://github.com/caravanglory/magehub --skill mage-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: mage-review
Source: https://github.com/caravanglory/magehub/tree/main/skills/standards/mage-review
Command: npx skills add https://github.com/caravanglory/magehub --skill mage-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps reviewers catch high-risk Magento 2 code issues before merge, with a structured process that focuses on correctness, security, performance, ACL, schema, and architecture concerns.

Core Features & Use Cases

  • Pre-merge code review: Analyze diffs, scope, and intent to surface actionable findings instead of vague commentary.
  • Risk-focused inspection: Check for SQL safety, authorization, input validation, concurrency, caching, API design, and database integrity problems.
  • Fix-first reporting: Produce severity-ranked findings with confidence scores, file-line evidence, concrete fixes, and verification commands.
  • Use case: Review a Magento pull request after rebasing or conflict resolution and return only the issues that matter most to shipping safely.

Quick Start

Use the mage-review skill to review the attached Magento diff and return prioritized findings with concrete fixes, confidence scores, and verification commands.

Frequently Asked Questions about mage-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a Magento 2 pull request for security and performance risks before merge?

Magento 2 pre-merge code review analyzes diffs, scope, and intent to surface actionable findings instead of vague commentary. It checks SQL safety, authorization, input validation, concurrency, caching, API design, and database integrity problems.

What does a Magento 2 diff analysis check for in admin controllers and APIs?

A Magento 2 diff analysis inspects admin controllers, APIs, plugins, and observers for security, correctness, ACL, and schema risks. It produces severity-ranked findings with file-line evidence, concrete fixes, and verification commands.

Can I use an automated code review to catch ACL and schema issues in Magento 2?

Yes, an automated code review can catch ACL and schema issues in Magento 2. It analyzes database changes, admin controllers, and plugins to identify authorization and database integrity risks, returning prioritized findings with confidence scores.

How do I get concrete fixes and verification commands for Magento code review findings?

You get concrete fixes and verification commands for Magento code review findings through fix-first reporting. This process produces severity-ranked findings with file-line evidence and confidence scores to verify issues are resolved.

Does Magento 2 pre-merge code review work on frontend and cache-related diffs?

Yes, Magento 2 pre-merge code review works on frontend and cache-related diffs. It analyzes these diffs alongside plugins and observers to identify performance, caching, and architecture risks with actionable findings.

What is the best way to check Magento 2 database changes for correctness and architecture risks?

The best way to check Magento 2 database changes for correctness and architecture risks is a structured pre-merge review. It analyzes schema changes and returns prioritized findings with concrete fixes, confidence scores, and verification commands.