mirror of
https://github.com/affaan-m/everything-claude-code.git
synced 2026-03-31 22:23:27 +08:00
a756602523
- Sync 13 agent files with updated descriptions and configurations - Sync 23 command files with latest YAML frontmatter and content - Sync 7 skill SKILL.md files with proper YAML frontmatter quoting - Copy missing cpp-testing and security-scan skills to .cursor/ - Fix integration tests: send matching input to blocking hook test and expect correct exit code 2 (was 1)
41 lines
985 B
Markdown
41 lines
985 B
Markdown
# Code Review
|
|
|
|
Comprehensive security and quality review of uncommitted changes:
|
|
|
|
1. Get changed files: git diff --name-only HEAD
|
|
|
|
2. For each changed file, check for:
|
|
|
|
**Security Issues (CRITICAL):**
|
|
- Hardcoded credentials, API keys, tokens
|
|
- SQL injection vulnerabilities
|
|
- XSS vulnerabilities
|
|
- Missing input validation
|
|
- Insecure dependencies
|
|
- Path traversal risks
|
|
|
|
**Code Quality (HIGH):**
|
|
- Functions > 50 lines
|
|
- Files > 800 lines
|
|
- Nesting depth > 4 levels
|
|
- Missing error handling
|
|
- console.log statements
|
|
- TODO/FIXME comments
|
|
- Missing JSDoc for public APIs
|
|
|
|
**Best Practices (MEDIUM):**
|
|
- Mutation patterns (use immutable instead)
|
|
- Emoji usage in code/comments
|
|
- Missing tests for new code
|
|
- Accessibility issues (a11y)
|
|
|
|
3. Generate report with:
|
|
- Severity: CRITICAL, HIGH, MEDIUM, LOW
|
|
- File location and line numbers
|
|
- Issue description
|
|
- Suggested fix
|
|
|
|
4. Block commit if CRITICAL or HIGH issues found
|
|
|
|
Never approve code with security vulnerabilities!
|