petrogurcak/database-review
plugins/review/skills/database-review/SKILL.md
Reviews database code for N+1 queries, missing indexes, transaction handling, connection pooling, and query patterns across SQL and ORM layers. Use when optimizing slow queries, reviewing database changes, debugging performance issues, preparing for scaling, or as part of deep-review. Trigger phrases include "review database code", "check queries", "DB performance", "find N+1". Not for database schema design or migrations — focused on code-level query patterns and performance.
$ install --global
skillsauthnpx skillsauth add petrogurcak/skills database-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 4:50 AM5.7s1 file scanned
SKILL.md
- name:
- database-review
- description:
- Reviews database code for N+1 queries, missing indexes, transaction handling, connection pooling, and query patterns across SQL and ORM layers. Use when optimizing slow queries, reviewing database changes, debugging performance issues, preparing for scaling, or as part of deep-review. Trigger phrases include "review database code", "check queries", "DB performance", "find N+1". Not for database schema design or migrations — focused on code-level query patterns and performance.
- author:
- Petr
- version:
- 1.0.0
- context:
- fork
- agent:
- Explore
Database Review
Kdy pouzit
- Jako soucast deep-review
- Performance problemy
- Nove database queries
- Before scaling
Checklist
N+1 Queries
Problem:
# N+1 - jeden query + N queries pro relationships
users = db.query(User).all()
for user in users:
print(user.posts) # Query pro kazdeho usera!
Fix:
# Eager loading - 2 queries total
users = db.query(User).options(selectinload(User.posts)).all()
Checklist:
- [ ] Eager loading pro relationships
- [ ] selectinload/joinedload (SQLAlchemy)
- [ ] prefetch_related (Django)
- [ ] ->with() (Laravel/Eloquent)
Indexy
Checklist:
- [ ] WHERE columns maji index
- [ ] JOIN columns maji index
- [ ] ORDER BY columns (pokud caste)
- [ ] Composite index pro multi-column WHERE
- [ ] EXPLAIN na pomale queries
Neindexovat:
- Low cardinality columns (boolean, status s 3 hodnotami)
- Columns ktere se casto updatuji
- Male tabulky (< 1000 rows)
Transactions
Checklist:
- [ ] Atomic operace v transakci
- [ ] Rollback on error
- [ ] Transakce nejsou prilis dlouhe
- [ ] Deadlock handling
# Spravne
async with session.begin():
session.add(order)
session.add(payment)
# Obe nebo nic
Connection Management
Checklist:
- [ ] Connection pooling (ne new connection per request)
- [ ] Pool size odpovida load
- [ ] Timeouts nastavene
- [ ] Connections vracene do poolu
Query Patterns
Checklist:
- [ ] LIMIT na velke datasety
- [ ] No SELECT * (explicit columns)
- [ ] Cursor pagination pro velke sety
- [ ] Batch inserts (ne jednotlive)
Quick Reference
| Issue | Severity | Detection | | -------------- | -------- | ------------------------------- | | N+1 queries | HIGH | Slow page, many queries in logs | | Missing index | HIGH | EXPLAIN shows seq scan | | No transaction | MEDIUM | Partial data on error | | SELECT * | LOW | Unnecessary data transfer |
Related Skills
petrogurcak/testimonial-harvesting
development
VerifiedTrustedCommunity
Builds a pre-launch social proof strategy through structured beta programs using D'Souza Brain Audit interviews. Use when launching new products/services and need compelling testimonials, planning a beta cohort, designing interview questions to harvest objection-busting social proof, improving video testimonials for landing pages, or designing case studies with metrics. Trigger phrases include "beta tester program for testimonials", "pre-launch social proof", "Brain Audit testimonial framework", "case study harvest", "reverse testimonial", "video testimonial mechanics", "social proof landing page", "sběr referencí", "beta tester program", "testimonial pro landing page", "social proof před launchem", "rozhovor s klientem", "case study sběr", "reference před spuštěním". NOT for ongoing case study production (use growth-hacking case-study approach), offer design (use offer-creation), or conversion optimization (use ux-optimization).
2SKILL.mdUpdated May 14, 2026
petrogurcak/launch-orchestrator
development
VerifiedTrustedCommunity
Use when planning a product launch and the product type is unclear or could be either generic (SaaS/app/physical) or info-product. Routes between marketing:launch-strategy (generic launches) and marketing:info-product-launch (courses, memberships, ebooks, cohorts, communities). Trigger phrases - "launch", "spuštění", "go-to-market", "product launch", "release strategy", "uvedení na trh", "launch plan", "spuštění produktu", "launch sequence", "launch strategy". Do NOT trigger when product type is already clear (use specific skill directly).
2SKILL.mdUpdated May 14, 2026
petrogurcak/info-product-launch
testing
VerifiedTrustedCommunity
Specialized 8-week launch cadence for info-products — online courses, cohort programs, memberships, communities, ebooks, masterminds. Combines Jeff Walker's Product Launch Formula (Seed/Internal/JV variants, PLC sequence, open-cart day-by-day) with Stu McLaren's membership mechanics (closed cart, Success Path) and Hormozi Grand Slam Offer stacking. Use when planning "launch online kurzu", "info-product launch", "PLF launch", "course launch", "membership launch", "cohort launch", "ebook launch", "open cart close cart", "8-week launch of online course", "beta cohort to launch sequence", "spuštění kurzu", "launch členské sekce", "open cart strategie". Differentiates from marketing:launch-strategy (generic SaaS/app launches) — info-product-specific. NOT for SaaS launches, physical products, or services.
2SKILL.mdUpdated May 14, 2026
petrogurcak/mobile-store-release
development
VerifiedTrustedCommunity
Use when releasing an Expo/React Native mobile app to App Store and Google Play - covers eas submit, ASC "Submit for Review", Play promote Internal→Production, OTA update, and decoding common silent failures (Apple agreement expiry, missing English locale, Background Location declaration, web bundle failure on react-native-maps).
2SKILL.mdUpdated May 14, 2026