# Review Code for Security and Quality

Code reviews miss security and reliability issues when guidance is inconsistent. This skill gives structured review criteria for security, performance, correctness, maintainability, and tests.

## Install

```bash
npx skillstore add shubhamsaboo/code-reviewer
```

## Metadata

- Status: approved
- Slug: shubhamsaboo-code-reviewer
- Version: 1.0
- Author version: 1.0
- Skillstore revision: r1
- Version status: invalid
- Tree hash: 605c745968e0ed3c34dc284e4ea940a802e2a458605242a72b87552369d09dd9
- Author: shubhamsaboo
- GitHub username: shubhamsaboo
- License: MIT
- Repository: https://github.com/shubhamsaboo/awesome-llm-apps/tree/main/awesome\_agent\_skills/code-reviewer
- Ref: 3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: allowed
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: scripts, external\_commands, network
- Quality score: 77
- Quality tier: bronze
- Public page: https://skillstore.pages.dev/skills/shubhamsaboo-code-reviewer
- Manifest: https://skillstore.pages.dev/api/skills/shubhamsaboo-code-reviewer/manifest

## Capabilities

- Identifies SQL injection patterns and recommends parameterized queries.
- Flags unsafe HTML insertion and recommends escaping or sanitization.
- Detects N\+1 query patterns and suggests eager loading or batching.
- Reviews error handling for silent failures and unclear exception paths.
- Checks naming, type hints, and maintainability concerns.
- Formats findings with severity, location, fix guidance, and a quality score.

## Use Cases

- Review a Pull Request: Check a proposed change for security, correctness, performance, maintainability, and missing tests before merge.
- Audit Security-Sensitive Code: Focus review attention on SQL injection, XSS, secrets, authorization assumptions, and insecure data handling.
- Improve Code Review Consistency: Use a shared checklist and severity model when reviewing code across a team.

## Prompt Templates

### Review a Small Change

```
Review this code for security, correctness, performance, and maintainability. Return findings by severity with line references and fixes.
```

### Check a Pull Request

```
Review the diff below as a pull request. Focus on SQL injection, XSS, N+1 queries, error handling, names, type hints, and tests.
```

### Audit a Feature

```
Audit this feature for security and reliability risks. Include missing validation, authorization assumptions, data exposure, performance hotspots, and required tests.
```

### Run a Release Gate

```
Perform a blocking pre-merge review. Separate must-fix issues from optional improvements, explain impact, and propose minimal safe changes.
```

## Limitations

- It does not execute code, run tests, or inspect runtime behavior.
- It focuses on the documented review rules and may miss domain-specific risks.
- Examples focus mainly on Python, JavaScript, TypeScript, and common ORMs.
- Line accuracy depends on the code context supplied by the user.

## Best Practices

- Provide the full diff or relevant files so the review can cite exact locations.
- Ask for severity-ranked findings when deciding whether a change can merge.
- Include framework, database, and runtime context for more precise recommendations.

## Anti Patterns

- Do not ask for only style feedback when security or correctness matters.
- Do not paste partial code that hides validation, authentication, or database access.
- Do not treat the review as a replacement for tests, scanners, or human approval.

## Security Audit

- Audited at: 2026-07-09T08:31:39.56\+00:00
- Summary: Static analysis flagged scripts, network calls, command execution, and keylogger terms, but review found they are educational examples inside code review guidance. No evidence found of active execution, data exfiltration, prompt injection, or malicious intent in the skill files.

## Stats

- Views: 0
- Downloads: 6
- Favorites: 0
- Popularity score: 0