ClawHub

Mobile Code Review Pro

Security

Expert-level code review for React Native and native iOS/Android applications. Use when reviewing mobile codebases for architecture, performance, security, or preparing for acquisition due diligence. Includes migration assessment for React Native → Native.

Install

openclaw skills install mobile-code-review-pro

Mobile Code Review Pro - React Native & Native iOS/Android

Expert-level code review for mobile applications. Based on extensive experience managing large-scale mobile codebases and successful migrations.

What This Skill Does

Comprehensive mobile code review covering:

  1. Architecture Analysis - Scalability, maintainability, patterns
  2. Performance Audit - Startup time, memory, battery, network
  3. Code Quality Review - Best practices, tech debt, refactoring opportunities
  4. Security Assessment - Data protection, API security, vulnerabilities
  5. Migration Readiness - React Native → Native evaluation
  6. Acquisition Prep - Code health for due diligence

Who This Is For

  • Startups preparing for acquisition
  • Companies with React Native performance issues
  • Teams considering React Native → Native migration
  • Engineering leaders wanting code quality audit
  • Companies scaling to 1M+ users

Expected Outcomes

Based on real code review experience:

  • Performance improvements: 30-50% faster app
  • Crash reduction: Achieve 99.9% crash-free rate
  • Code quality: Reduce tech debt by 40-60%
  • Migration roadmap: Clear path if rewriting
  • Acquisition-ready: Clean code for due diligence

Skill Capabilities

When you invoke this skill, it will:

✅ Analyze codebase architecture and patterns ✅ Identify performance bottlenecks ✅ Detect security vulnerabilities ✅ Evaluate React Native → Native migration viability ✅ Create prioritized improvement roadmap ✅ Estimate effort and ROI for changes

How to Use This Skill

Quick Review (1-2 days)

"Perform quick code review for [app name]"

Delivers:

  • Top 10 issues
  • Quick wins
  • High-level recommendations

Full Audit (1-2 weeks)

"Perform comprehensive mobile code audit"

Delivers:

  • Complete architecture analysis
  • Performance profiling
  • Security assessment
  • Detailed roadmap

Migration Assessment (3-5 days)

"Assess React Native to Native migration viability"

Delivers:

  • Migration cost/benefit analysis
  • Timeline estimate
  • Risk assessment
  • Go/no-go recommendation

Acquisition Prep (1 week)

"Prepare codebase for acquisition due diligence"

Delivers:

  • Code health report
  • Tech debt inventory
  • Remediation plan
  • Documentation for buyers

Review Categories

1. Architecture Review

What We Check:

  • Code organization and modularity
  • Design patterns used
  • Dependency management
  • State management approach
  • Network layer architecture
  • Database/caching strategy

Common Issues Found:

  • God objects/classes
  • Tight coupling
  • Poor separation of concerns
  • Inconsistent patterns

2. Performance Audit

What We Measure:

  • App startup time
  • Screen rendering performance
  • Memory usage patterns
  • Battery consumption
  • Network efficiency
  • Bundle size

Tools Used:

  • Instruments (iOS)
  • Android Profiler
  • Flipper
  • Custom profiling scripts

Benchmarks:

  • Startup: < 2 seconds
  • Frame rate: 60 FPS consistent
  • Memory: < 150MB typical usage
  • Battery: Minimal background drain

3. Code Quality Assessment

What We Review:

  • Code style consistency
  • Test coverage (% and quality)
  • Documentation completeness
  • Error handling patterns
  • Logging practices
  • Code duplication

Metrics:

  • Cyclomatic complexity
  • Code coverage %
  • Technical debt ratio
  • Maintainability index

4. Security Review

What We Audit:

  • Data encryption (at rest, in transit)
  • API key management
  • Authentication/authorization
  • Sensitive data handling
  • Third-party library vulnerabilities
  • Platform-specific security issues

Common Vulnerabilities:

  • Hardcoded secrets
  • Insecure data storage
  • Man-in-the-middle risks
  • Insufficient input validation

5. React Native Specific

Bridge Performance:

  • JS ↔ Native communication overhead
  • Serialization bottlenecks
  • Native module efficiency

Bundle Analysis:

  • Bundle size optimization
  • Lazy loading opportunities
  • Dead code elimination

Migration Viability:

  • Feature complexity mapping
  • Team capability assessment
  • ROI calculation

6. Native Platform Review

iOS Specific:

  • Swift/Objective-C best practices
  • Memory management (ARC)
  • Auto Layout performance
  • Background task handling
  • App Store compliance

Android Specific:

  • Kotlin/Java patterns
  • Memory leak detection
  • Battery optimization
  • Fragment management
  • Play Store compliance

Deliverables

Code Review Report

Executive Summary (2-3 pages)

  • Overall health score (A-F)
  • Top 5 critical issues
  • Quick wins (can fix in 1-2 sprints)
  • Strategic recommendations

Detailed Findings (10-20 pages)

  • Category-by-category analysis
  • Specific code examples
  • Severity ratings (Critical/High/Medium/Low)
  • Remediation approaches

Roadmap (5-10 pages)

  • Prioritized action items
  • Effort estimates
  • Timeline recommendations
  • Resource requirements

Technical Artifacts

  • Spreadsheet: All issues catalogued with metadata
  • Scripts: Automated checks for ongoing monitoring
  • Dashboards: Performance metrics baseline
  • Documentation: Best practices guide for team

Templates Included

  1. Code Review Checklist (templates/code-review-checklist.md)

    • Platform-specific checks
    • Severity rating guide
    • Best practice references

  2. Performance Profiling Guide

    • Tools setup
    • Metrics to track
    • Benchmark targets

  3. Security Audit Template

    • Vulnerability categories
    • Testing procedures
    • Remediation checklist

  4. Migration Assessment Framework

    • Cost model
    • Timeline estimator
    • Risk matrix

  5. Report Template

    • Executive summary format
    • Finding documentation
    • Roadmap structure

Requirements

  • Access to codebase (GitHub/GitLab/Bitbucket)
  • Build environment access (for profiling)
  • Business context (scale, goals, constraints)
  • Team context (size, skills, timeline)

Advanced Features

For complex scenarios:

Performance Regression Testing:

"Set up automated performance monitoring"

Continuous Code Quality:

"Implement CI/CD code quality gates"

Migration Execution Support:

"Guide React Native to Native migration execution"

Version History

  • v1.0 (Feb 2026) - Initial release
    • Full code review capabilities
    • Migration assessment
    • Acquisition prep

This skill is based on extensive experience managing large-scale mobile codebases, including complete rewrites and migrations, with successful outcomes for high-traffic consumer applications.

More in Security