code-review-assistant

---
name: code-review-assistant
description: Automated code review assistance including best practices evaluation, security vulnerability detection, performance optimization suggestions, code quality assessment, and style guide enforcement. Use when Claude needs to perform code reviews, assess code quality, identify potential issues, or provide improvement recommendations.
---

# Code Review Assistant

## Overview
This skill provides comprehensive code review capabilities to evaluate code quality, identify issues, and suggest improvements across multiple programming languages.

## When to Use This Skill
- Performing systematic code reviews
- Assessing code quality and maintainability
- Identifying potential security vulnerabilities
- Evaluating performance implications
- Ensuring adherence to coding standards
- Providing constructive feedback to developers

## Review Categories

### Code Quality
- Readability and maintainability
- Proper function/method length
- Meaningful variable and function names
- Appropriate level of abstraction
- DRY (Don't Repeat Yourself) principles

### Security Considerations
- Input validation and sanitization
- SQL injection prevention
- Cross-site scripting (XSS) protection
- Authentication and authorization
- Data encryption and privacy
- Dependency security

### Performance
- Algorithmic complexity
- Memory usage optimization
- Database query efficiency
- Caching strategies
- Resource management
- Asynchronous operations

### Best Practices
- Error handling and logging
- Proper exception management
- Code documentation and comments
- Testing coverage and quality
- Configuration management

## Review Process

### 1. Architecture & Design
- Evaluate overall structure
- Check for separation of concerns
- Assess scalability considerations
- Verify design pattern usage

### 2. Code Implementation
- Review logic correctness
- Check for edge cases
- Validate error handling
- Assess resource management

### 3. Security Assessment
- Identify potential vulnerabilities
- Check authentication/authorization
- Verify data validation
- Review dependency security

### 4. Performance Analysis
- Evaluate algorithm efficiency
- Check for memory leaks
- Assess database queries
- Review caching strategies

### 5. Maintainability
- Check code readability
- Assess documentation quality
- Verify test coverage
- Review naming conventions

## Feedback Guidelines
- Be specific and actionable
- Provide positive reinforcement
- Suggest alternatives when appropriate
- Prioritize issues by severity
- Reference relevant documentation

## Severity Levels
- Critical: Security vulnerability, data loss risk
- High: Functional defect, major performance issue
- Medium: Potential bug, maintainability concern
- Low: Style issue, minor improvement suggestion

## Scripts Available
- `scripts/run-security-check.js` - Security vulnerability scan
- `scripts/performance-analyzer.js` - Performance assessment
- `scripts/style-checker.js` - Coding style verification
- `scripts/test-coverage.js` - Coverage analysis

## References
- `references/security-checklist.md` - Comprehensive security checklist for code reviews
- `references/performance-guidelines.md` - Performance optimization guidelines and best practices

• SKILL.md 3 KB
• references/performance-guidelines.md 2 KB
• references/security-checklist.md 2 KB
• scripts/run-security-check.js 2 KB