tech-lead/code-review

Reviews code against checklists covering correctness, quality, security, performance, and maintainability.

553|50|Updated Jan 10, 2026
One-click install
npx skills add https://github.com/echoVic/boss-skill --skill tech-lead-code-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tech-lead/code-review
Source: https://github.com/echoVic/boss-skill/tree/main/skill/skills/tech-lead/code-review
Command: npx skills add https://github.com/echoVic/boss-skill --skill tech-lead-code-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Code reviews are often inconsistent because reviewers lack a structured checklist, causing security flaws, performance issues, and maintainability problems to slip through. This Skill gives the tech-lead agent a repeatable review methodology so every change is evaluated against the same criteria.

Core Features & Use Cases

  • Structured Review Checklist: Covers functional correctness, code quality, security (input validation, SQL injection, XSS, auth), performance (N+1 queries, database optimization), and maintainability.
  • Agent-Invocable Methodology: Designed to be triggered by the tech-lead agent inside the Boss pipeline when code needs review or quality assessment.
  • Tech Stack Awareness: Depends on shared/tech-stack-detection so review criteria align with the project's actual technology stack.
  • Use Case: During a Boss pipeline run, the tech-lead agent invokes this Skill to review a pull request, walking through each checklist category and reporting issues before QA gates run.

Quick Start

Ask the tech-lead agent to review the current code changes using the code review checklist and report any correctness, security, or performance issues.

Frequently Asked Questions about tech-lead/code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a structured code review with an AI agent?

Invoke the tech-lead agent with this code review methodology, which walks through checklists for correctness, quality, security, performance, and maintainability. The agent reports findings per category instead of giving unstructured feedback.

What should a code review checklist include?

A thorough checklist covers functional correctness and edge cases, naming and single-responsibility functions, input validation and injection/XSS protection, query performance such as avoiding N+1 problems, and testability plus adherence to project conventions.

Can this code review skill be invoked directly by users?

No, it is marked agent-invocable only, meaning the tech-lead agent triggers it during review workflows. Users request a review from the agent, which then applies this methodology internally.

Does the code review adapt to different tech stacks?

Yes, it declares a dependency on shared/tech-stack-detection, so the review criteria are informed by the detected project technologies rather than applied generically.

What are the limitations of checklist-based code review?

Checklist-based review catches common issues but cannot replace runtime testing or deep architectural analysis. It works best combined with automated tests, QA gates, and security scanning tools.