code-reviewer

Code Review Skill

Triggers: review, code review, check, take a look, any problems, security

Tools:read_file、grep_search、get_errors、run_in_terminal("ruff check .")、run_in_terminal("mypy .")

---

Review Items

Code Quality

Function length (grep_search("def ")), naming clarity, DRY principle (search for duplication), complexity (nesting/branching)

Security

Risks	grep Patterns
SQL injection	execute.*%s|f".*SELECT
XSS	innerHTML|dangerouslySetInnerHTML
Sensitive data	password|secret|api_key
Hardcoded passwords	password.*=.*['"]

Performance

N+1 queries (DB calls inside loops), unnecessary loops

Workflow

1. ruff check src/ + mypy src/ + get_errors()
2. read_file target files
3. grep_search security risk patterns
4. Compile report (strengths / suggestions / quality+security+performance score 0-10)