# Code Review

> Review code changes for bugs, security issues, and improvements Use when this capability is needed.

- Skill: `tomevault-io/code-review-322` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/code-review-322`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/code-review-322/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/code-review-322

---


# Code Review Skill

## Review Checklist

### 1. Correctness
- Does the code do what it claims?
- Are edge cases handled (null, empty, bounds)?
- Is error handling appropriate?

### 2. Security
- Input validation present?
- No SQL injection, XSS, command injection?
- Secrets not hardcoded?
- Permissions checked?

### 3. Performance
- No N+1 queries?
- Appropriate data structures?
- Unnecessary loops or allocations?

### 4. Maintainability
- Clear naming?
- Functions do one thing?
- No magic numbers?
- Tests included?

## Review Format

For each issue found:

```
**[SEVERITY] file:line - Brief description**

Problem: What's wrong
Impact: Why it matters
Suggestion: How to fix
```

Severities: CRITICAL, HIGH, MEDIUM, LOW, NIT

## Workflow

1. Read the diff or changed files
2. Understand the intent (PR description, commit messages)
3. Check each file against the checklist
4. Summarize findings with severity levels

---
> Source: [victordibia/designing-multiagent-systems](https://github.com/victordibia/designing-multiagent-systems) — distributed by [TomeVault](https://tomevault.io).
<!-- tomevault:4.0:skill_md:2026-06-26 -->