| name | code-review |
| description | Review code for quality, security, and best practices. Use when reviewing recent changes, PRs, or checking code quality. Proactively use after significant code modifications. |
| allowed-tools | Read, Grep, Glob, Bash |
Code Review
Comprehensive code review following project standards.
Review Checklist
Code Quality
- Clear naming conventions
- No code duplication
- Proper error handling with
{ success, error }pattern - TypeScript types explicit (no
any)
Project Patterns
- Uses hooks for Supabase queries (not direct queries in components)
- Services return
{ success, data?, error? } - AI calls go through
aiGatewayService.ts - Data transforms follow 4-layer schema (Raw → Parsed → Database → Display)
Security
- No hardcoded secrets or API keys
- Input validation on external data
- SQL injection prevention
- XSS protection
Testing
- E2E tests use
?e2e=1for auth bypass - Schema transformers have validation tests
Output Format
For each finding:
- Severity: Critical / Warning / Suggestion
- File:Line: Location
- Issue: Description
- Fix: Recommended solution
Trigger Phrases
- "review my changes"
- "code review"
- "check this code"
- "/review"