---
name: code-review
description: "Systematic code review for bugs, security, style, and performance"
tags: [code-quality, review]
version: "1.0.0"
---

# Code Review

Perform a systematic code review covering these categories:

## Review Checklist

### 1. Correctness
- Logic errors, off-by-one, null/None handling
- Edge cases: empty inputs, large inputs, concurrent access
- Error handling: are exceptions caught and handled properly?

### 2. Security
- Input validation and sanitization
- SQL injection, XSS, command injection
- Secrets in code, hardcoded credentials
- Authentication and authorization checks

### 3. Performance
- Unnecessary loops, N+1 queries
- Missing indexes for database queries
- Large memory allocations, unbounded collections
- Blocking calls in async code

### 4. Style & Maintainability
- Naming clarity (variables, functions, classes)
- Function length — split if >30 lines
- Dead code, commented-out code
- Missing type annotations

### 5. Testing
- Are new code paths covered by tests?
- Are edge cases tested?
- Are error paths tested?

## Output Format

For each issue found:
- **File:line** — category — description — suggested fix
- Severity: critical / warning / suggestion