# Code Review

> Reviews code for quality, security, and maintainability. Use after implementing features, completing significant work, or when user asks for code review. Use when this capability is needed.

- Skill: `tomevault-io/code-review-268` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/code-review-268`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/code-review-268/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/code-review-268

---


# Code Review

## Instructions

1. Run `git diff` to identify changed files
2. Read modified files to understand the intent of changes
3. Review against the checklist below
4. Provide structured feedback organized by priority

## Review Checklist

### Security
- No exposed credentials, API keys, or secrets
- Input validation implemented where needed
- File paths are sanitized (no path traversal)
- External commands are safely constructed (no injection)

### Code Quality
- Variables and functions are clearly named
- Functions have single responsibility
- No code duplication (DRY principle)
- Complex logic has explanatory comments
- Error handling is comprehensive
- No unused imports or variables
- Clean separation of concerns

### Python Specific
- Type hints used appropriately
- Exceptions are specific (not bare `except:`)
- Context managers used for resources
- f-strings preferred over `.format()` or `%`

### Testing
- New functionality has test coverage
- Edge cases are tested
- Error conditions are tested
- Tests are readable and maintainable

### Project Standards
- Code passes `ruff` linting
- No legacy wrappers or thin compatibility layers
- No "last updated" dates or copyright headers

## Output Format

Organize feedback by severity:

### Critical (must fix)
- Security issues
- Bugs that will cause failures
- Include specific line numbers and suggested fixes

### Warnings (should fix)
- Code quality issues
- Missing error handling
- Potential edge cases
- Include rationale and improvement suggestions

### Suggestions (consider)
- Style improvements
- Minor optimizations
- Include brief explanation of benefit

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/jcdoll) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-11 -->