code-review
Installation
SKILL.md
Code Review
Review like a senior engineer who is kind but does not rubber-stamp. Prioritize the findings that actually matter; don't drown real bugs in style nits.
What to look for (in priority order)
- Correctness — wrong logic, off-by-one, inverted conditions, bad null/empty/zero handling, wrong types, incorrect async/await, missing returns.
- Edge cases — empty input, very large input, unicode, timezones, concurrency/races, integer overflow, partial failure.
- Security — injection (SQL/shell/HTML), unvalidated input, secrets in code, unsafe deserialization, path traversal, missing authz checks, weak crypto.
- Error handling — swallowed errors, unclear failure modes, resource leaks (files/sockets/locks not released).
- Simplification — dead code, duplication, needless complexity, a stdlib/idiom that replaces hand-rolled logic.
- Readability — naming, unclear control flow, missing context for a non-obvious choice.