Automated code quality analysis and review guidance.
Actions
Action
Description
Example
review
Full code review
$code-review review src/
quick
Quick review of a file
$code-review quick src/app/page.tsx
security
Security-focused review
$code-review security
Review Dimensions
1. Correctness
Logic errors and bug patterns
Edge case handling (null, empty, boundary values)
Error handling completeness
Type safety violations
2. Performance
N+1 queries
Unnecessary re-renders
Missing memoization
Large bundle imports
Unoptimized images
3. Security
Input validation
XSS vulnerability
SQL/NoSQL injection
Exposed secrets
Missing auth checks
4. Maintainability
Code readability
Naming conventions
Function/file length
DRY violations
Dead code
5. Convention Compliance
Project naming rules (Phase 2)
File structure rules
Import ordering
Comment quality
Review Output Format
## Code Review: [filename]
### Critical Issues
- [Line XX] Description of critical issue
### Major Issues
- [Line XX] Description of major issue
### Minor Issues / Suggestions
- [Line XX] Suggestion for improvement
### Summary
- Files: X reviewed
- Issues: X critical, X major, X minor
- Recommendation: Approve / Changes Requested
Integration with Pipeline
Code review is part of Phase 8 but can be run independently at any time.
Use $phase-8-review for a full architecture + code review.
Use $code-review for quick, file-level reviews during development.
Review Checklist
See references/review-checklist.md for the complete checklist.
Common Patterns to Flag
Pattern
Issue
Fix
catch(e) {}
Swallowed error
Log or re-throw
any type
Type safety loss
Use proper type
// TODO
Incomplete code
Complete or track
Hardcoded URL
Environment coupling
Use env vars
console.log
Debug code left in
Remove or use logger
key={index}
Unstable React key
Use unique ID
Converted and distributed by TomeVault — claim your Tome and manage your conversions.
1---2name: popup-studio-ai-bkit-codex-code-review3description: Code Review Skill4---56# Code Review Skill78> Automated code quality analysis and review guidance.910## Actions1112| Action | Description | Example |13|--------|-------------|---------|14| `review` | Full code review | `$code-review review src/` |15| `quick` | Quick review of a file | `$code-review quick src/app/page.tsx` |16| `security` | Security-focused review | `$code-review security` |1718## Review Dimensions1920### 1. Correctness21- Logic errors and bug patterns22- Edge case handling (null, empty, boundary values)23- Error handling completeness24- Type safety violations2526### 2. Performance27- N+1 queries28- Unnecessary re-renders29- Missing memoization30- Large bundle imports31- Unoptimized images3233### 3. Security34- Input validation35- XSS vulnerability36- SQL/NoSQL injection37- Exposed secrets38- Missing auth checks3940### 4. Maintainability41- Code readability42- Naming conventions43- Function/file length44- DRY violations45- Dead code4647### 5. Convention Compliance48- Project naming rules (Phase 2)49- File structure rules50- Import ordering51- Comment quality5253## Review Output Format5455```markdown56## Code Review: [filename]5758### Critical Issues59- [Line XX] Description of critical issue6061### Major Issues62- [Line XX] Description of major issue6364### Minor Issues / Suggestions65- [Line XX] Suggestion for improvement6667### Summary68- Files: X reviewed69- Issues: X critical, X major, X minor70- Recommendation: Approve / Changes Requested71```7273## Integration with Pipeline7475Code review is part of Phase 8 but can be run independently at any time.76Use `$phase-8-review` for a full architecture + code review.77Use `$code-review` for quick, file-level reviews during development.7879## Review Checklist8081See `references/review-checklist.md` for the complete checklist.8283## Common Patterns to Flag8485| Pattern | Issue | Fix |86|---------|-------|-----|87| `catch(e) {}` | Swallowed error | Log or re-throw |88| `any` type | Type safety loss | Use proper type |89| `// TODO` | Incomplete code | Complete or track |90| Hardcoded URL | Environment coupling | Use env vars |91| `console.log` | Debug code left in | Remove or use logger |92| `key={index}` | Unstable React key | Use unique ID |9394---95> Converted and distributed by [TomeVault](https://tomevault.io/claim/popup-studio-ai) — claim your Tome and manage your conversions.96<!-- tomevault:4.0:skill_md:2026-04-13 -->
Run npx get-skill add tomevault-io/popup-studio-ai-bkit-codex-code-review in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Code Review Skill It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.
