# Review Code

> Perform a comprehensive multi-dimensional code review covering correctness, security (OWASP 2025), performance, and maintainability. Use when reviewing pull requests, staged changes, or specific files. Use when this capability is needed.

- Skill: `tomevault-io/review-code` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/review-code`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/review-code/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/review-code

---


# Code Review

Perform a thorough, multi-dimensional code review on $ARGUMENTS.

**Reference:** [Google Engineering Practices](https://google.github.io/eng-practices/review/)

## Review Strategy

When conducting code reviews:

1. Understand the change context (PR description, issue, commit messages)
2. Verify functional correctness against requirements
3. Scan for security vulnerabilities (OWASP Top 10)
4. Evaluate performance implications
5. Assess maintainability and code quality
6. Validate test coverage

## Dynamic Context

- Git status: !`git status --short 2>/dev/null`
- Recent changes: !`git diff --stat HEAD~3 2>/dev/null || echo "N/A"`
- Staged changes: !`git diff --cached --stat 2>/dev/null || echo "N/A"`

## References

| Topic | Reference | Use for |
| --- | --- | --- |
| Review Dimensions | [references/review-dimensions.md](references/review-dimensions.md) | Full 5-dimension review checklists (Correctness, Security, Performance, Maintainability, Architecture) with code examples |
| Output Format | [references/output-format.md](references/output-format.md) | Review target resolution, severity classification, report template, best practices |
| Anti-Patterns | [references/anti-patterns.md](references/anti-patterns.md) | Code smells table, security anti-patterns, performance anti-patterns with examples |

## Related Skills

- [security-scan](/security-scan) - Deep security audit
- [mutation-test](/mutation-test) - Test quality assessment
- [pr-summary](/pr-summary) - PR documentation

## Resources

- [OWASP Top 10 2025](https://owasp.org/Top10/)
- [Google Code Review Guidelines](https://google.github.io/eng-practices/review/)
- [Conventional Comments](https://conventionalcomments.org/)

## Guardrails
- Prefer measured evidence over blanket rules of thumb.
- Ask for explicit human approval before destructive data operations (drops/deletes/truncates).

---
> Source: [gr1m0h/dot](https://github.com/gr1m0h/dot) — distributed by [TomeVault](https://tomevault.io).
<!-- tomevault:4.0:skill_md:2026-05-31 -->