Comprehensive code analysis for quality, security, and performance
Review Categories
1. Code Quality
Naming conventions
Code structure
DRY principles
SOLID principles
Complexity metrics
2. Security
Input validation
Authentication/Authorization
SQL injection
XSS vulnerabilities
Sensitive data exposure
3. Performance
Algorithm efficiency
Memory usage
Database queries
Caching opportunities
Bundle size
4. Best Practices
Error handling
Logging
Testing coverage
Documentation
Type safety
Usage
# Review specific file
/code-review src/components/Login.tsx
# Review entire feature
/code-review user-authentication
# Review with specific focus
/code-review security src/api/
Output Format
## Code Review Report
### Summary
- Files reviewed: N
- Issues found: N (Critical: N, Warning: N, Info: N)
### Critical Issues
- [FILE:LINE] Description
### Warnings
- [FILE:LINE] Description
### Suggestions
- [FILE:LINE] Description
### Positive Observations
- Well-structured code in X
- Good test coverage in Y
Integration with PDCA
Code review is part of the Check phase:
Run /code-review after implementation
Address critical issues
Run /pdca analyze for gap analysis
Iterate until quality standards met
Converted and distributed by TomeVault — claim your Tome and manage your conversions.
1---2name: popup-studio-ai-bkit-gemini-code-review3description: Code Review Skill4---56# Code Review Skill78> Comprehensive code analysis for quality, security, and performance910## Review Categories1112### 1. Code Quality13- Naming conventions14- Code structure15- DRY principles16- SOLID principles17- Complexity metrics1819### 2. Security20- Input validation21- Authentication/Authorization22- SQL injection23- XSS vulnerabilities24- Sensitive data exposure2526### 3. Performance27- Algorithm efficiency28- Memory usage29- Database queries30- Caching opportunities31- Bundle size3233### 4. Best Practices34- Error handling35- Logging36- Testing coverage37- Documentation38- Type safety3940## Usage4142```bash43# Review specific file44/code-review src/components/Login.tsx4546# Review entire feature47/code-review user-authentication4849# Review with specific focus50/code-review security src/api/51```5253## Output Format5455```markdown56## Code Review Report5758### Summary59- Files reviewed: N60- Issues found: N (Critical: N, Warning: N, Info: N)6162### Critical Issues63- [FILE:LINE] Description6465### Warnings66- [FILE:LINE] Description6768### Suggestions69- [FILE:LINE] Description7071### Positive Observations72- Well-structured code in X73- Good test coverage in Y74```7576## Integration with PDCA7778Code review is part of the Check phase:791. Run `/code-review` after implementation802. Address critical issues813. Run `/pdca analyze` for gap analysis824. Iterate until quality standards met8384---85> Converted and distributed by [TomeVault](https://tomevault.io/claim/popup-studio-ai) — claim your Tome and manage your conversions.86<!-- tomevault:4.0:skill_md:2026-04-11 -->
Run npx skillmds@latest add tomevault-io/popup-studio-ai-bkit-gemini-code-review in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Code Review Skill It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.
tomevault-io