Security audit
Security checks for vulnerabilities and agentic risk
This code-review skill is coherent and disclosed: it reads a repository, writes local review reports, and only allows source-code changes after user approval or an implementation request.
Before installing, expect this skill to create local review files under review/<timestamp>/ in the project it reviews. Treat those files like generated artifacts: inspect them before committing, and only use fix/refactor modes when you are comfortable with source-code changes after the required plan or explicit request.
``` ```text Use $code-review-auditor to create a refactoring plan for the hotspots, but do not change code yet. ``` ## Installation
def git_value(root: Path, *args: str) -> str:
try:
result = subprocess.run(
["git", *args],
cwd=root,
check=True,## Performance - Look for missing or unused indexes, non-sargable predicates, full scans, sort/hash pressure, N+1 access, unbounded queries, and excessive joins. - Check pagination strategy, batch size, connection pool settings, lock duration, and migration impact on large tables. ## Architecture
## Performance - Look for missing or unused indexes, non-sargable predicates, full scans, sort/hash pressure, N+1 access, unbounded queries, and excessive joins. - Check pagination strategy, batch size, connection pool settings, lock duration, and migration impact on large tables. ## Architecture
No suspicious patterns detected.