speckit-code-review

What problem does it solve?

This Skill automates a focused security and quality review of uncommitted changes and diffs to detect high-risk issues early in the development workflow, reducing the chance of shipping vulnerabilities or low-quality code.

Core Features & Use Cases

• Security checks: Detects hardcoded credentials, API keys, tokens, SQL injection, XSS, missing input validation, insecure dependencies, and path traversal risks.
• Code quality rules: Flags overly long functions, very large files, deep nesting, missing error handling, console/log statements, and TODO/FIXME comments.
• Reporting & remediation: Produces a Markdown report with severity (CRITICAL, HIGH, MEDIUM, LOW), file locations, line numbers, descriptions, and suggested fixes and attempts to fix CRITICAL/HIGH issues immediately.
• Use Cases: Pre-commit or pre-merge checks, CI gating for pull requests, security triage during code review, and automated remediation of the most severe findings.

Quick Start

Run a speckit code review on the repository to scan uncommitted changes and generate a prioritized security and quality report.