review

Reviews staged and unstaged git diffs for bugs, security issues, and performance problems.

Updated Apr 18, 2026
One-click install
npx skills add https://github.com/webdevarif/claude-skills --skill review-webdevarif
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/webdevarif/claude-skills/tree/main/review
Command: npx skills add https://github.com/webdevarif/claude-skills --skill review-webdevarif

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Catching bugs, security vulnerabilities, and performance regressions before code is merged is time-consuming and error-prone when done manually. This Skill automates structured code review of your current git changes, delivering prioritized, actionable feedback with file and line references. ## Core Features & Use Cases - Diff-Based Analysis: Reads staged and unstaged changes via git diff, status, and log to understand exactly what changed and why. - Prioritized Issue Reporting: Classifies findings into Critical (security, data loss, breaking changes), Important (bugs, performance, error handling), and Suggestions (readability, patterns). - Shopify-Aware Checks: Applies additional review rules for Shopify apps, including authentication, webhook HMAC validation, GraphQL query cost, and GDPR webhooks. - Use Case: Before opening a pull request, run the review to catch a missing await, an N+1 query, or an exposed secret in your diff, then fix issues with the concrete remediation steps provided. ## Quick Start Ask the assistant to review my current code changes for bugs, security issues, and performance problems.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code changes before committing?

Run the review on your working tree to analyze staged and unstaged diffs via git diff. It reports issues grouped by severity—Critical, Important, and Suggestions—with file and line references and concrete fix recommendations.

What does an automated code review check for?

It checks for security issues like SQL injection and exposed secrets, bugs like missing awaits and null access, performance problems like N+1 queries, and readability concerns. It only reports issues actually found in the diff, avoiding false positives.

Does this code review support Shopify app development?

Yes, it includes Shopify-specific checks when changes involve Shopify code. It verifies admin authentication in loaders and actions, webhook HMAC validation, GraphQL query cost, rate limiting, GDPR webhooks, and session token usage.

Can the review analyze changes across multiple files?

Yes, it reads the full diff across all changed files and can open complete files when diff context is insufficient. This lets it detect cross-file issues like removed exports still referenced elsewhere or changed function signatures.

Why does the review report fewer issues than expected?

The review is instructed to avoid inventing problems and skip subjective style nitpicks. It only reports issues actually visible in the diff, marking uncertain findings as potential issues rather than confirmed bugs.