Code Review Guide Skill

Bad code review nitpicks style while missing the design flaw, or dumps 40 ungraded comments. Good review is prioritized and kind: it catches what actually matters (correctness, security, design), separates blocking issues from nits, explains the why, and leaves the author better. This skill runs that review.

Required Inputs

Ask for these only if they aren't already provided:

• The change — the diff/PR, and ideally its description/intent (what it's trying to do).
• Context — language/stack, conventions, the part of the system it touches, risk level.
• Focus (optional) — anything specific to scrutinize (security, performance, a tricky area).

Output Format

Review: [PR / change]

Summary — in 1–2 lines: what the change does and your overall read (solid / needs work / risky).

Review passes — scan in priority order and note findings:

1. Correctness — does it do what it claims? Edge cases, error handling, off-by-ones, concurrency.
2. Security & data — input validation, authz, secrets, injection, PII handling.
3. Design — is this the right approach? Coupling, the seam, simpler alternative, future pain.
4. Tests — do they cover the behavior and the edges? Would they catch a regression?
5. Readability — names, clarity, dead code, docs where non-obvious.

Comments (ranked by severity) — each with file/line, the issue, why it matters, and a concrete suggestion: