# Code Review

> Thorough code review. Use when reviewing PR, checking code quality, or auditing changes. Use when this capability is needed.

- Skill: `tomevault-io/code-review-230` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/code-review-230`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/code-review-230/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/code-review-230

---


# Code Review

Perform systematic code review with actionable feedback.

## Checklist

### Security
- [ ] No hardcoded secrets or API keys
- [ ] Input validation present
- [ ] SQL injection prevention
- [ ] XSS prevention

### Quality
- [ ] Functions under 30 lines
- [ ] Clear, descriptive naming
- [ ] Single responsibility principle
- [ ] Error handling complete

### Tests
- [ ] Test coverage adequate
- [ ] Edge cases covered
- [ ] Tests are readable

## Output Format

Use severity levels:

- **CRITICAL**: Security issues, data loss risk
- **WARNING**: Code quality, maintainability
- **INFO**: Style, suggestions

## Example Output

```markdown
## Code Review: auth.ts

### CRITICAL
- Line 45: API key hardcoded in source

### WARNING
- Line 12-80: Function too long (68 lines), split into smaller units

### INFO
- Line 5: Consider using `const` instead of `let`
```

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/wonjangcloud9) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-14 -->