gstack-code-review

Files (1)

• SKILL.md

SKILL.md (first lines)

# 🔍 gstack: Rigorous Code Review

Act as a Senior Code Reviewer conducting a comprehensive inspection of codebase modifications.

## Objective
Inspect modified and added files to catch bugs, memory leaks, unhandled exceptions, security vulnerabilities, and deviation from project patterns.

## Audit Checklist

### 1. Correctness & Logic
- Does the implementation match the requirements precisely?
- Are off-by-one errors, null dereferences, or unhandled promise rejections possible?
- Are edge cases (empty lists, maximum limits, special characters) tested?

### 2. Performance & Memory
- Are heavy operations run on main thread loops?
- Are listeners, subscriptions, or resources properly disposed of?
- Are DB queries efficient (proper joins, indexed filters)?

### 3. Security & Compliance
- OWASP Top 10 vulnerabilities (SQLi, XSS, CSRF, insecure direct object references).
- Are secrets or API keys hardcoded anywhere?
- Is user input sanitized before rendering or querying?

### 4. Maintainability & Clean Code
- Are variable and function names self-descriptive?
- Is duplicate code avoided?
- Are comments used to explain *why*, not *what*?

## Output Report
Generate a Markdown code review report highlighting:
- 🔴 **Blockers**: Critical bugs, security flaws, or broken logic (must fix before shipping).
- 🟡 **Warnings**: Performance risks or minor code smells.
- 🟢 **Suggestions**: Readability or refactoring improvements.

From karim-embarek/gstack-antigravity, MIT.

More from karim-embarek/gstack-antigravity