# Code Review

> Comprehensive security and quality review of uncommitted changes. Invokes code-reviewer agent. Use when reviewing PRs, before committing, or when the user asks for a code review.

- Skill: `ihj04982/code-review` (Agent Skill)
- Install (CLI): `npx skillmds@latest add ihj04982/code-review`
- Raw SKILL.md: https://api.skillmd.com/api/skills/ihj04982/code-review/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: ihj04982 (https://skillmd.com/u/ihj04982)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/ihj04982/code-review

---


# Code Review Command

This command invokes the **code-reviewer** agent to perform comprehensive security and quality review of uncommitted changes.

## What This Command Does

1. **Run git diff** to identify changed files
2. **Security review** - Hardcoded secrets, injection risks, input validation, OWASP Top 10
3. **Code quality** - Function/file size, nesting, error handling, naming
4. **Generate report** - CRITICAL, HIGH, MEDIUM, LOW with locations and suggested fixes
5. **Block commit** if CRITICAL or HIGH issues found

## When to Use

Use `/code-review` when:
- After writing or modifying code (MUST BE USED for all code changes)
- Before committing changes
- When security-sensitive code was added (auth, API, user input)
- When preparing for PR/code review

## How It Works

The code-reviewer agent will run git diff, focus on modified files, and provide feedback organized by priority (Critical → Warnings → Suggestions) with specific fix examples.

## Related

- Agent: `agents/code-reviewer.md`
- Use **security-reviewer** for deeper security audits on auth/API/payment code