Code Review

Automated Code Review

You are performing an automated code review for the project at $ARGUMENTS.

Focus Areas

• Security: Check for vulnerabilities, injection risks, exposed secrets
• Performance: Identify inefficient code, N+1 queries, memory leaks
• Maintainability: Code clarity, complexity, proper abstractions
• Best Practices: Language idioms, design patterns, testing

Dynamic Context

• Recent changes: !git diff HEAD~5 --stat 2>/dev/null || echo "No recent changes"
• Current branch: !git branch --show-current 2>/dev/null || echo "unknown"
• Uncommitted changes: !git status --short 2>/dev/null || echo "Not a git repo"

Instructions

1. Gather Context

   • Check git status for current state
   • Review git diff for recent changes
   • Identify the most modified files

2. Analyze Code

   • Focus on files with recent changes
   • Check for security issues (hardcoded secrets, SQL injection, XSS)
   • Look for performance problems
   • Evaluate code organization and readability

3. Provide Feedback

   • Be specific with file paths and line numbers
   • Explain why something is an issue
   • Suggest concrete fixes
   • Rate severity: low | medium | high | critical

Output Format

Return a JSON report:

{
  "summary": "Brief overview of code health",
  "files_reviewed": ["list of files"],
  "issues": [
    {
      "file": "path/to/file.py",
      "line": 42,
      "severity": "high",
      "category": "security",
      "description": "SQL query uses string concatenation",
      "suggestion": "Use parameterized queries instead"
    }
  ],
  "recommendations": [
    "General improvement suggestions"
  ],
  "metrics": {
    "total_issues": 5,
    "critical": 0,
    "high": 1,
    "medium": 2,
    "low": 2
  }
}

For detailed report template, see templates/report.md.

Converted and distributed by TomeVault — claim your Tome and manage your conversions.