# Code Review

> Systematic code review process with focus on quality, security, and best practices Use when this capability is needed.

- Skill: `tomevault-io/code-review-116` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/code-review-116`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/code-review-116/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/code-review-116

---


# Code Review Skill

## When to Use
- User asks for code review or feedback
- Reviewing a pull request or diff
- Analyzing code quality or security

## Review Checklist

### 1. Functionality
- [ ] Does the code do what it's supposed to?
- [ ] Are edge cases handled?
- [ ] Is error handling appropriate?

### 2. Code Quality
- [ ] Is the code readable and maintainable?
- [ ] Are functions and variables named clearly?
- [ ] Is there unnecessary duplication?
- [ ] Are comments helpful and accurate?

### 3. Security
- [ ] Input validation present?
- [ ] No hardcoded secrets?
- [ ] SQL injection prevention?
- [ ] XSS prevention?

### 4. Performance
- [ ] Efficient algorithms used?
- [ ] No N+1 query problems?
- [ ] Resources properly managed?

### 5. Testing
- [ ] Tests cover main functionality?
- [ ] Edge cases tested?
- [ ] Tests are readable?

## Output Format

For each finding, provide:
1. **Location**: File and line number
2. **Severity**: Critical / High / Medium / Low
3. **Issue**: Clear description of the problem
4. **Suggestion**: How to fix it
5. **Example**: Code snippet showing the fix (if applicable)

## Example Review Comment

**Location**: `src/api/users.go:42`
**Severity**: High
**Issue**: SQL query built using string concatenation
**Suggestion**: Use parameterized queries to prevent SQL injection
**Example**:
```go
// Before (vulnerable)
query := "SELECT * FROM users WHERE id = " + userID

// After (safe)
query := "SELECT * FROM users WHERE id = ?"
db.Query(query, userID)
```

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/cloudshipai) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-11 -->