Semgrep + CodeRabbit Review Skill

A comprehensive two-stage code review workflow that combines fast pattern detection with AI-powered semantic analysis for maximum coverage and efficiency.

What I Do

I orchestrate a complete code review process:

Stage 1: Fast Pattern Detection (10-20 seconds)

• Run Semgrep to catch security patterns, architecture violations, and code quality issues
• Identify hardcoded secrets, SQL injection risks, XSS vulnerabilities
• Check Repository Pattern compliance (API layer)
• Validate authentication guards and error handling patterns
• Flag console.log and weak cryptography patterns

Stage 2: AI-Powered Semantic Review (5-30 minutes)