Code Review Assistant

Problem

Code review of snippets often depends on individual habits: some pass focus on syntax, while edge cases, SQL injection, or sensitive-data leaks slip through. This skill fixes a set of common review dimensions so the report is more consistent.

How it works

It first obtains the code: pasted content or a file path; if no code is supplied, it asks for input. It then identifies the language and context, such as Python, JavaScript, Java, C++, Vue, or SQL, and decides whether to split a larger fragment. The review covers style and conventions, logic correctness, potential bugs, performance optimization, and security risks, including null references, out-of-bounds access, redundant computation, XSS, and injection issues. For important findings, it provides before/after code comparisons and can follow up with explanations or function rewrites.

Boundaries

It does not modify user files, and any code execution for validation requires confirmation. It is useful for local code checks or pre-PR self-review, but it does not replace full testing, architecture review, or business-rule validation.