← All commands
Development · /code-review
Code Review
Review code systematically for defects, maintainability, security, and design.
When to use it
Use this to find correctness, security, and maintenance risks before merging a change.
Useful inputs
- Changed code or diff
- Relevant requirement
- Runtime and sensitive areas
Instruction
Provide prioritized findings with code context, impact, and a fix. Do not state unverified concerns as facts.
Example input
Diff: [File upload endpoint]. Requirement: Users can access only their own files. Report findings by severity.
Example result
[High] The download endpoint does not verify file ownership. A caller may try another user's file ID. Include the authenticated user in the authorization condition for every query.
Common pitfall
Do not report style preferences as confirmed defects; include impact and trigger conditions.