# Code Review > Review code for correctness, security, maintainability, and style. Use when reviewing pull requests, examining code changes, or performing code review. Use when this capability is needed. - Skill: `tomevault-io/code-review-308` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/code-review-308` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/code-review-308/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Security - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/code-review-308 --- # Code Review ## Checklist - [ ] **Correctness**: Logic correct, edge cases handled - [ ] **Security**: No obvious vulnerabilities (injection, auth bypass) - [ ] **Maintainability**: Readable, no unnecessary complexity - [ ] **Tests**: Adequate coverage for changes - [ ] **Style**: Matches project conventions ## Severity Levels - **Critical**: Must fix (bug, security issue) - **Suggestion**: Should improve (readability, pattern) - **Nice to have**: Optional enhancement ## Feedback Format - Be specific: point to the code - Explain why: "Consider X because Y" - Suggest fix when possible - Acknowledge good patterns ## What to Avoid - Nitpicking style (use linter) - Vague feedback ("this could be better") - Blocking on non-blocking issues --- > Source: [iamjcabalejo/payoys-cursor-sub-agents](https://github.com/iamjcabalejo/payoys-cursor-sub-agents) — distributed by [TomeVault](https://tomevault.io).