code-reviewer

SKILL.md

A comprehensive code review skill that analyzes pull requests and code changes for quality, security, maintainability, and best practices.

| Hardcoded secrets | const APIKEY = "sk-" | Use environment variables | | SQL injection | \"SELECT FROM...\" + userinput | Use parameterized queries | | XSS vulnerability | innerHTML = userinput | Sanitize or use textContent | | Missing auth check | New endpoint without @RequireAuth | Add authentication middleware |

| N+1 query | Loop with database call | Use eager loading or batch queries | | Unnecessary re-render | Missing dependencies in useEffect | Fix dependency array | | Memory leak | Event listener not removed | Add cleanup in useEffect return | | Inefficient loop | Nested loops O(n²) | Consider hash map or different algorithm |

查看原文