Code Review Skill

Systematic code review patterns covering security, performance, accessibility, quality, and testing across languages and frameworks.

Security Review

Critical Checks:

• Authentication tokens validated; authorization on sensitive ops
• Session management secure (httpOnly, secure, sameSite)
• No hardcoded credentials/API keys
• Proper RBAC implementation
• JWT tokens with proper algorithms (not 'none')
• Password hashing: bcrypt/argon2 (not MD5/SHA1)