code-review

Installation
SKILL.md

Code Review Skill

Systematic code review patterns covering security, performance, accessibility, quality, and testing across languages and frameworks.

Security Review

Critical Checks:

  • Authentication tokens validated; authorization on sensitive ops
  • Session management secure (httpOnly, secure, sameSite)
  • No hardcoded credentials/API keys
  • Proper RBAC implementation
  • JWT tokens with proper algorithms (not 'none')
  • Password hashing: bcrypt/argon2 (not MD5/SHA1)

Input Validation:

  • User inputs sanitized
  • SQL injection prevention (parameterized queries)
  • XSS prevention (escaping/sanitization)
  • CSRF tokens on state-changing ops
Related skills
Installs
17
GitHub Stars
11
First Seen
Feb 27, 2026