Full PR review with CRITICAL/MAJOR/MINOR/NIT findings and concrete fixes across correctness, security, performance, resilience, design, testability, and readability
From sde-code-qualitynpx claudepluginhub chavangorakh1999/sde-skills --plugin sde-code-quality<paste diff or file>/review-codeConducts comprehensive code review assessing quality, architecture, security, and performance, producing prioritized reports, fix examples, and improvement recommendations.
/review-codeReviews code against specification compliance, checks if implementation matches requirements, identifies deviations, and reports a compliance score.
/review-codeCodeRabbit-style multi-agent code review with inline findings and verdicts
/review-codeReviews uncommitted changes for code quality, security, performance, accessibility, Next.js 15/React 18+ best practices, TypeScript strict mode, Server/Client components, and Azure/Railway configs. Provides detailed feedback with severity ratings, file/line references, code examples, positives, and prioritized actions.
/review-codeComprehensive code review combining clean-code-review and code-smell-detector.
Systematic review across 7 dimensions. Every finding includes severity, location, problem, and a concrete fix. Chains pr-review + security-review.
/review-code [paste git diff or file contents]
/review-code # asks for code to review
If code is not provided, ask: "Please paste the diff, file, or describe what you'd like reviewed."
Accept: git diff output, single file contents, function/class snippet.
Note: the larger the diff, the more likely to miss subtle issues. If diff > 500 lines, ask if there's a specific area to focus on.
Before reviewing, briefly state your understanding:
If you misunderstand, the user can correct before you spend time on the wrong review.
Apply security-review skill first — security issues are blockers.
Check:
Apply solid-principles and code-smells lenses:
Produce findings in the standard format. Conclude with merge recommendation.
## Code Review: [Feature/File Name]
### Summary
[2-3 sentences: overall quality, number of blocking issues, merge recommendation]
### Findings
[CRITICAL] path/file.js:42 — Security: SQL Injection
Problem: req.query.id concatenated directly into query string
Fix: db.query('SELECT * FROM users WHERE id = $1', [req.query.id])
[MAJOR] services/order.js:88 — Resilience: No timeout on Stripe call
Problem: stripe.charges.create() has no timeout — hangs indefinitely on Stripe slowness
Fix: await Promise.race([stripe.charges.create(data), timeout(5000)])
[MINOR] controllers/user.js:15 — Correctness: Missing await in loop
Problem: items.forEach(async item => ...) — forEach ignores promises, errors swallowed
Fix: await Promise.all(items.map(item => processItem(item)))
[NIT] utils/format.js:3 — Rename d to date
### What's Done Well
- Error handling with typed errors
- Input validation with Joi before DB queries
- Consistent response format
### Merge Recommendation
[ ] Block — fix CRITICAL issues before merge
/refactor [code]"/write-tests [code]"/review-code with security focus"