mh-cto-sdlc-code-review

Automate code reviews for correctness, security, and testability in SDLC phase 6.

2|Updated Apr 5, 2026
One-click install
npx skills add https://github.com/Imad-Oute/MicroHard --skill mh-cto-sdlc-code-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: mh-cto-sdlc-code-review
Source: https://github.com/Imad-Oute/MicroHard/tree/main/src/departments/cto/sdlc/phase-6-implementation/mh-cto-sdlc-code-review
Command: npx skills add https://github.com/Imad-Oute/MicroHard --skill mh-cto-sdlc-code-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires security-tool, testing-library, linting-tool, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill ensures that the code submitted for review in phase 6 of the software development life cycle (SDLC) is correct, secure, and adheres to best practices, preventing production-level issues.

Core Features & Use Cases

  • Code Review Automation: Automates the code review process to catch errors and non-compliance with company standards.
  • Security Assessment: Checks for potential security vulnerabilities and non-compliance with data protection standards.
  • Testability and Maintainability Check: Ensures that new code paths are testable and that the codebase is maintainable.
  • D22/D23 Compliance Verification: Ensures the code is free of technical debt by adhering to file path and vertical slice principles.
  • Use Case: For a new feature implemented by the engineering team, this Skill will automatically review the code against all compliance standards before advancing the story to done.

Quick Start

Trigger the code review process for the story currently under review with the command "code review".

Frequently Asked Questions about mh-cto-sdlc-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review for security and testability in phase 6 of the SDLC?

Automated code review in SDLC phase 6 validates code correctness, security, and testability by applying file path and vertical slice standards. It inspects code, runs automated testing, and performs vulnerability scanning to ensure compliance before advancing features.

What is vertical slice compliance verification for code review?

Vertical slice compliance verification ensures new code is free of technical debt by adhering to specific file path and architectural principles. It validates that the codebase remains maintainable and aligns with company standards during the review phase.

How does automated vulnerability scanning work during a code review?

Automated vulnerability scanning during code review checks for potential security flaws and data protection non-compliance. It uses security tools to inspect submitted code paths, ensuring the software meets required security standards before production deployment.

Do I need specific testing and linting tools to ensure code maintainability?

Yes, ensuring code maintainability requires testing and linting tools to validate that new code paths are testable. These dependencies automate the inspection process, checking for errors and verifying adherence to structural quality standards.

Can I check for technical debt automatically when reviewing new features?

Yes, you can automatically check for technical debt when reviewing new features by validating code against D22 and D23 compliance standards. This process inspects file paths and vertical slices to prevent production-level issues.

When should I use automated code review instead of manual inspection?

Automated code review should be used when advancing stories to done in the SDLC, ensuring consistent validation of correctness, security, and testability. It prevents production-level issues by enforcing strict compliance standards that manual inspection might miss.