Help us improve
Share bugs, ideas, or general feedback.
From ennam-dev-agent-team
Comprehensive code review checklist covering security, performance, TypeScript standards, NextJS patterns, accessibility, error handling, and test coverage. Stack-aware — applies web, mobile, or fullstack sections as appropriate. Automatically loaded by the reviewer agent.
npx claudepluginhub en-nam/ennam-claude-agent-team --plugin ennam-dev-agent-teamHow this skill is triggered — by the user, by Claude, or both
Slash command
/ennam-dev-agent-team:code-review-checklistThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Apply each section systematically to every file changed in the review scope.
Conducts code reviews for security (OWASP Top 10), performance (N+1 queries, lazy loading), WCAG 2.1 AA accessibility, and quality standards across languages and frameworks.
Provides structured checklist for code reviews prioritizing security, correctness, performance, quality, and style. Covers secrets, injections, logic errors, inefficiencies, and maintainability.
Guides technical evaluation of code review feedback: read fully, restate for understanding, verify against codebase, respond with reasoning or pushback before implementing.
Share bugs, ideas, or general feedback.
Apply each section systematically to every file changed in the review scope. Use severity levels: Critical (must fix), Warning (should fix), Suggestion (consider for improvement).
dangerouslySetInnerHTML without sanitization)include / select appropriately)next/image with proper width/height and priority flagsReact.memo, useMemo, useCallback (not excessive)'use client' directives)prisma/schema.prisma)any types (use unknown if type is truly unknown)src/types/, not duplicated across filesconst objects or literal union types! without justification)page.tsx, layout.tsx, route.ts, loading.tsx, error.tsxmetadata or generateMetadata exported for SEO on public pagesprocess.env only accessed in server-side codealt text (descriptive, not generic)<label> elements{ error: string, code: string }src/app/api/, src/services/, src/lib/server/, prisma/src/app/ (non-api), src/components/, src/hooks/, src/lib/client/, src/styles/lib/, android/, ios/, test/, integration_test/, pubspec.yamltests/, __tests__/, **/*.test.*, **/*.spec.*src/types/, package.json, tsconfig.json) only modified by team-leadWhen reviewing mobile-dev branches:
const constructors used for stateless widgetsbuild() method (extract to methods/widgets)autoDispose when appropriateref.watch used in build, ref.read used in callbacks (not reversed)setState for app-wide state (use Riverpod)dart analyze clean)ValueKey)## Review: [branch-name]
### Summary
[1-2 sentence overview]
### [filename]
- **Critical**: [issue with line reference]
- **Warning**: [concern with explanation]
- **Suggestion**: [improvement idea]
### Cross-Cutting Concerns
- API contract consistency: [pass/fail with details]
- Domain boundary compliance: [pass/fail with details]
- Test coverage: [adequate/gaps identified]
### Verdict: [APPROVE | REQUEST_CHANGES | NEEDS_DISCUSSION]
[Reasoning for verdict]