Review

Code Review (wrapper)

Runs the code-reviewer + security-audit agents in sequence for a complete review.

Execution order

Step 1 — Identify the scope of change

git diff --stat HEAD~1  # or git diff --stat main...HEAD
git diff --name-only HEAD~1

Stop if there are no changes.

Step 2 — Code review (code-reviewer agent)

Invoke Agent code-reviewer:

• Security: hardcoded keys/tokens, missing input validation
• Performance: N+1 queries, unnecessary synchronous I/O
• Quality: any types, functions over 50 lines, duplication, dead code
• Convention: violations of .claude/rules/ conventions

Step 3 — Security audit (security-audit agent)

Invoke Agent security-audit:

• grep scan of the 12 P0 security items
• weak cryptography, SQL injection, CORS wildcards

Step 4 — Combined report

## Code Review Summary — {{PROJECT_NAME}}

### Code Review
N CRITICAL / M WARNING / K SUGGESTION

### Security Audit
N P0 violations / M P1 violations

### Merge Recommendation
✅ Ready to merge / ❌ Hold for CRITICAL or P0 violations

If there is even one CRITICAL or P0 violation, recommend holding the merge.

Quick review (when an argument is given)

/review quick — skip security-audit, run code-reviewer only.

Learned warnings

(Notes discovered during execution accumulate here)