# Review

> Comprehensive code review for PRs or recent changes. Checks correctness, security, performance, maintainability, and tests. Use when this capability is needed.

- Skill: `tomevault-io/review-13` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/review-13`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/review-13/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/review-13

---


# Code Review Instructions

Review the code for:
- **Correctness**: Logic errors, edge cases, null handling
- **Security**: Injection, XSS, secrets exposure, auth issues
- **Performance**: N+1 queries, unnecessary loops, memory leaks
- **Maintainability**: Complexity, naming, documentation
- **Tests**: Coverage, edge cases, meaningful assertions

## Dynamic Context
- Recent changes: !`git diff HEAD~5 --stat 2>/dev/null || echo "No recent changes"`
- Current branch: !`git branch --show-current 2>/dev/null || echo "unknown"`
- Uncommitted changes: !`git status --short 2>/dev/null || echo "Not a git repo"`

## Review Process

1. **Gather Context**
   - Check `git status` for current state
   - Review `git diff` for recent changes
   - Identify the most modified files

2. **Analyze Code**
   - Focus on files with recent changes
   - Check for security issues (hardcoded secrets, SQL injection, XSS)
   - Look for performance problems
   - Evaluate code organization and readability

3. **Provide Feedback**
   - Be specific with file paths and line numbers
   - Explain why something is an issue
   - Suggest concrete fixes
   - Rate severity

## Severity Ratings

Format: Provide feedback as:
- Critical: Must fix before merge
- Important: Should fix, but not blocking
- Suggestion: Nice to have improvements

## Output Format

Return a structured report:
```json
{
  "summary": "Brief overview of code health",
  "files_reviewed": ["list of files"],
  "issues": [
    {
      "file": "path/to/file.py",
      "line": 42,
      "severity": "critical|important|suggestion",
      "category": "security|performance|correctness|maintainability",
      "description": "What's wrong",
      "suggestion": "How to fix it"
    }
  ],
  "recommendations": [
    "General improvement suggestions"
  ],
  "metrics": {
    "total_issues": 5,
    "critical": 0,
    "important": 1,
    "suggestions": 4
  }
}
```

$ARGUMENTS

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/dontizi) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-13 -->