# Code Review

> Reviews C# code for bugs, security issues, and best practices. Use when this capability is needed.

- Skill: `tomevault-io/code-review-245` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/code-review-245`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/code-review-245/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/code-review-245

---

# Code Review

## When to use
Use this skill when the user asks you to review C# code, check for bugs, or audit for security issues.

## Review Checklist

### Bug Patterns
- Null reference risks (missing null checks, nullable misuse)
- Resource leaks (undisposed IDisposable objects)
- Off-by-one errors in loops and indexing
- Unhandled exceptions or swallowed catch blocks

### Security Issues
- SQL injection (string concatenation in queries)
- Hardcoded secrets or connection strings
- Path traversal vulnerabilities
- Insecure deserialization

### Best Practices
- Follow C# naming conventions (PascalCase for public, camelCase for private)
- Use `async/await` properly (avoid `.Result`, `.Wait()`)
- Prefer `IReadOnlyList<T>` over `List<T>` in public APIs
- Use pattern matching and modern C# features

## Output Format
Provide a summary with severity levels: **Critical**, **Warning**, **Info**.

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/elbruno) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-13 -->