review

# Code Review Mode **Recommended model tier:** smart (opus) - this skill requires complex reasoning Comprehensive code review covering quality, security, and maintainability. ## Review Checklist ### Code Quality - [ ] Clear naming (variables, functions, classes) - [ ] Single responsibility (functions do one thing) - [ ] DRY (no unnecessary duplication) - [ ] Appropriate abstraction level - [ ] Error handling coverage - [ ] Edge cases considered ### Security (OWASP Top 10) - [ ] Input validation (no injection vulnerabilities) - [ ] Authentication checks (routes protected) - [ ] Authorization (proper access control) - [ ] Sensitive data handling (no secrets in code) - [ ] SQL/NoSQL injection prevention - [ ] XSS prevention (output encoding) - [ ] CSRF protection - [ ] Secure dependencies (no known vulnerabilities) ### Maintainability - [ ] Code is readable without comments - [ ] Comments explain "why" not "what" - [ ] Consistent with codebase patterns - [ ] Tests cover critical paths - [ ] No dead code ### Performance - [ ] No N+1 queries - [ ] Appropriate caching - [ ] No memory leaks - [ ] Efficient algorithms ## Context-Efficient Reading Prefer lightweight tools first, then read in detail where needed: - **`code_outline`** -- Collapsed skeleton with signatures and line ranges. Great first step for unfamiliar files. - **`code_symbols`** -- Quick symbol list when you only need names and kinds. - **`code_search`** / **`code_references`** -- Find symbol definitions...