---

name: code-review description: Review code for quality, security, and correctness with severity-based feedback

Code Review Skill

Review code and artifacts for quality, security, performance, and correctness.

When to Use

• Reviewing code before merge
• Security audit of implementation
• Performance review
• Checking code quality and best practices

Input Format

CopyReview Type: [code | security | performance | general]
Code:
```[language]
[Your code here]

Context: [Optional - what this code does, requirements]

Copy
### Examples

**Code review:**

Review Type: code Code:

Copydef process_payment(user_id, amount):
    user = db.query(f"SELECT * FROM users WHERE id = {user_id}")
    if user.balance >= amount:
        db.execute(f"UPDATE users SET balance = balance - {amount}")
        return True
    return False

Context: Payment processing function for e-commerce checkout

Copy
**Security review:**

Review Type: security Code: [paste code]

Copy
## Output Format

```markdown
## Review Summary
**Decision**: [APPROVED | CHANGES REQUESTED | BLOCKED]

### Issues Found

#### 🔴 Critical (X)
| Issue | Location | Fix |
|-------|----------|-----|
| SQL Injection | line 2 | Use parameterized queries |

#### 🟠 High (X)
...

#### 🟡 Medium (X)
...

#### 🔵 Low (X)
...

### Positive Notes
- Good use of...
- Clean separation of...

### Recommendations
1. First priority fix
2. Second priority fix

Issue Categories

Severity Levels

Decision Criteria

• APPROVED: No critical/high issues
• CHANGES REQUESTED: Has medium+ issues that should be addressed
• BLOCKED: Has critical security or correctness issues

Related Skills

• coder - Generate fixes for identified issues
• architect - Review architectural implications
• pm-validator - Validate against requirements