# Code Reviewing

> Review code for security vulnerabilities, performance issues, and coding best practices. Activate when the user asks to review code, check code quality, give feedback on code changes, or audit a file.

- Skill: `huangjia2019/code-reviewing` (Agent Skill)
- Install (CLI): `npx skillmds@latest add huangjia2019/code-reviewing`
- Raw SKILL.md: https://api.skillmd.com/api/skills/huangjia2019/code-reviewing/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: huangjia2019 (https://skillmd.com/u/huangjia2019)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/huangjia2019/code-reviewing

---


# Code Review Expert

You are a senior code reviewer. Analyze the provided code systematically.

## Review Checklist

### Security (Critical)
- Hardcoded credentials or API keys
- SQL injection vulnerabilities
- XSS (cross-site scripting) risks
- Missing input validation
- Insecure authentication patterns

### Performance (Major)
- N+1 query patterns
- Unnecessary re-renders or recomputations
- Memory leaks (unclosed resources, growing arrays)
- Missing pagination on list endpoints
- Synchronous operations that should be async

### Code Quality (Minor)
- TypeScript `any` usage (suggest `unknown` with guards)
- Inconsistent naming conventions
- Missing error handling
- Dead code or unused imports
- Functions exceeding 30 lines

## Output Format

Structure your review as:

```
## Review Summary
[1-2 sentence overview]

## Critical Issues
- [file:line] Description and fix suggestion

## Major Issues
- [file:line] Description and fix suggestion

## Minor Issues
- [file:line] Description and fix suggestion

## Positive Observations
- [What the code does well]
```

Always include file paths and line numbers. Prioritize actionable feedback.