dmitryprg-ai/code-review
.claude/skills/code-review/SKILL.md
Review code for quality, security, and maintainability. Use when reviewing pull requests, examining code changes, doing QA checks, architecture review, or CTO review. Also trigger for COMPLEX tasks affecting more than 5 files, API contract changes, or data migrations.
$ install --global
skillsauthnpx skillsauth add dmitryprg-ai/cursor-develop-autorules code-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 2:10 AM5.2s3 files scanned
SKILL.md
- name:
- code-review
- description:
- Review code for quality, security, and maintainability. Use when reviewing pull requests, examining code changes, doing QA checks, architecture review, or CTO review. Also trigger for COMPLEX tasks affecting more than 5 files, API contract changes, or data migrations.
- allowed-tools:
- Read, Grep, Glob
- model:
- sonnet
- user-invocable:
- true
Code Review
QA Checklist
Code Quality
- [ ] 0 linter errors — linter catches mechanical mistakes before humans need to
- [ ] 0 TypeScript errors — type safety prevents entire classes of runtime bugs
- [ ] No console.log (except intentional debug) — logs in production leak implementation details
- [ ] Tests pass — untested code is unverified code
- [ ] Edge cases handled — empty arrays, null values, boundary conditions
- [ ] Error cases handled — what happens when things go wrong?
Naming Standards
| Type | Convention | Example |
|------|-----------|---------|
| Files (components) | PascalCase | ComponentName.tsx |
| Files (utils) | camelCase | utilName.ts |
| Functions | camelCase | functionName() |
| Components | PascalCase | ComponentName |
| Constants | UPPER_SNAKE | CONSTANT_NAME |
JTBD Verification (user-facing features)
- [ ] Job Story implemented — the feature solves the user's actual problem
- [ ] UI text about benefits, not features — "See deals at a glance" not "Algorithm analyzes"
- [ ] Minimum steps to result — every extra click is a tax on the user
- [ ] No confusing terminology — avoid jargon the user wouldn't use
Feedback Format
- CRITICAL: Must fix before merge — blocks deployment
- SUGGESTION: Consider improving — improves maintainability
- NICE TO HAVE: Optional enhancement — polish
CTO Review (for COMPLEX tasks)
Apply when: change affects 5+ files, API contract changes, data migration, new architectural pattern.
See detailed template: references/CTO-REVIEW.md
Key areas:
- Scope — What changed and why
- Risk Assessment — What could break
- Alternatives — Were other approaches considered
- Recommendation — Approve / Request changes / Escalate
- Rollback Plan — How to revert if needed
Related Skills
dmitryprg-ai/techdebt-scan
development
VerifiedTrustedCommunity
Scan codebase for technical debt and fix safely with TDD. Use to find oversized files, duplicated code, code smells, and refactor safely. Workflow - SCAN, TEST CASES, REFACTOR, VERIFY. Keywords - techdebt, tech debt, duplicates, code quality audit.
8SKILL.mdUpdated Apr 17, 2026
dmitryprg-ai/tdd-workflow
development
VerifiedTrustedCommunity
Test-Driven Development workflow with strict Red-Green-Refactor cycle. Use when developing features with TDD, writing tests before code, or when test-driven approach is needed. MANDATORY order - test cases table BEFORE code, failing tests BEFORE implementation.
8SKILL.mdUpdated Apr 17, 2026
dmitryprg-ai/session-review
testing
VerifiedTrustedCommunity
Review work session quality and capture improvements. Use at end of session, after large tasks, after series of errors, or when user asks for session review, retrospective, lessons learned. Records improvements to backlog.
8SKILL.mdUpdated Apr 17, 2026
dmitryprg-ai/research
data-ai
VerifiedTrustedCommunity
Analyze data, investigate datasets, work with CSV/parquet/pandas/dataframes. Use when analyzing data, exploring datasets, running experiments, or when user mentions data, analysis, parquet, csv, pandas, dataframe, statistics, investigation.
8SKILL.mdUpdated Apr 17, 2026