review

Review code changes for tenant isolation and Clerk authentication by applying security passes that check access controls, proper tenant scoping, and signature verification. The skill produces structured findings with severity categories to prevent security gaps.

A security-focused code review for Stripe webhook handling checks for proper signature verification and event validation. It ensures webhook endpoints correctly verify incoming requests to prevent unauthorized access and data exposure within the application.

Validate tenant isolation correctness in staged code changes by running a correctness pass that checks logic, edge cases, and consented behavior against requirements. This ensures proper data separation and prevents cross-tenant data leaks.

Yes, you can use this review process to assess code quality and project conventions. A dedicated quality pass evaluates readability, verifies test coverage, and checks alignment with established project conventions to prevent regressions.

The best way to generate a prioritized report for security and correctness issues is to analyze staged changes and categorize findings into must fix, should fix, or suggestion severity levels. This produces a concise summary for review.

You need a dedicated code review for authentication flow changes when modifications touch Clerk authentication or tenant isolation boundaries. This ensures proper access control, signature verification, and prevents regressions in security-critical paths.