Agent skill · software engineering · aiskillstore
code-review-standards
Code review framework and criteria. References security-sentinel for security checks. Use when performing code reviews or defining review standards.
Why this skill is useful
Provides a comprehensive code review framework that includes specific security checks and TypeScript quality standards not commonly found in generic resources.
What it needs
About 6k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Code Review Standards When to Use Reviewing pull requests Performing code reviews Defining review criteria Establishing review process Overview Code review standards ensure consistent, thorough reviews that catch bugs before they reach production. This skill aggregates criteria from specialized skills. Review Framework 4-Level Severity Classification 1. CRITICAL 🔴 - Must fix before merge Security vulnerabilities Data loss risks Authentication bypasses SQL injection risks 2. HIGH 🟠 - Should fix before merge TypeScript strict mode violations Missing error handling Performance issues (N+1 queries) Missing input validation 3. MEDIUM 🟡 - Fix soon (can merge with plan) Code quality issues Missing tests Poor naming Missing documentation 4. LOW 🟢 - Nice to have Style suggestions Optimization opportunities Refactoring ideas --- Review Checklist 1. Correctness → See: correctness-criteria.md [ ] Logic is correct for all test cases [ ] Edge cases handled (null, empty, max, min) [ ] Error conditions properly handled [ ] Return types match function signatures [ ] Async operations properly awaited [ ] No race conditions [ ] No off-by-one errors --- 2. Security → See: security-sentinel skill → See: security-checklist.md CRITICAL - Must check every review: [ ] No hardcoded secrets [ ] Input validation with Zod (ALL inputs) [ ] Authentication checked on protected routes [ ] Authorization enforced (resource ownership) [ ] SQL injection prevented (using Drizzle) [ ] XSS prevented (no dangerouslySetInnerHTML without sanitization) [ ] CSRF protection on state-changing operations [ ] No sensitive data in logs [ ] Passwords hashed (bcrypt, 12+ rounds) [ ] JWTs properly verified For complete security criteria: → security-sentinel/SKILL.md --- 3. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/code-review-standards