petrvs-code-review

Review Laravel and Angular diffs for security and performance issues.

19|14|Updated Aug 6, 2024
One-click install
npx skills add https://github.com/gestaogovbr/pgd-petrvs-publico --skill petrvs-code-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: petrvs-code-review
Source: https://github.com/gestaogovbr/pgd-petrvs-publico/tree/main/.trae/skills/petrvs-code-review
Command: npx skills add https://github.com/gestaogovbr/pgd-petrvs-publico --skill petrvs-code-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill reduces the risk of shipping insecure or slow code by reviewing Laravel (back-end) and Angular (front-end) changes against Petrvs standards before merge.

Core Features & Use Cases

  • Security review for Laravel: checks authorization, validation, mass assignment, and data exposure risks.
  • Security review for Angular: evaluates sanitization, guard usage, and sensitive data exposure.
  • Performance review across stacks: identifies N+1 queries, inefficient rendering, and problematic RxJS subscription patterns.
  • Petrvs quality alignment: validates architecture patterns (Services/Repositories, Eloquent Resources, SOLID) and front-end structure conventions.
  • Use Case: before merging a PR that changes authentication/permissions and introduces new API calls, use the Skill to pinpoint security issues, performance bottlenecks, and missing test coverage.

Quick Start

Ask the skill to review your Petrvs Laravel + Angular diff for security, performance, and standards compliance.

Frequently Asked Questions about petrvs-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review Laravel and Angular code changes for security vulnerabilities before merging?

To review Laravel and Angular code changes for security vulnerabilities, analyze pull request diffs for mass assignment risks, data exposure, and missing sanitization. This process checks authorization, validation, and guard usage to pinpoint security issues before merge.

What is the best way to detect N+1 queries and inefficient RxJS patterns in a full-stack PR?

The best way to detect N+1 queries and inefficient RxJS subscription patterns is to perform a diff-based performance review across the Laravel and Angular stacks, identifying database query bottlenecks and problematic front-end rendering or subscription logic.

How do I check if my pull request meets architecture standards for Services, Repositories, and SOLID principles?

To check if your pull request meets architecture standards for Services, Repositories, and SOLID principles, validate the diff against established quality alignment patterns. This ensures Eloquent Resources and front-end structure conventions are correctly implemented.

Can I use an automated review to assess sensitive authentication and permission modifications in a Laravel backend?

Yes, you can use an automated review to assess sensitive authentication and permission modifications in a Laravel backend. Pre-merge analysis evaluates the modified API calls and authorization logic, organizing findings by risk severity and referencing affected files.

When should I run a diff-based code assessment on critical modules?

You should run a diff-based code assessment on critical modules immediately after sensitive authentication, permissions, or query modifications, and before merging any pull request. This ensures safety and efficiency requirements are covered before changes ship.