Overview

This skill performs a comprehensive review of medium-sized PRs (100-500 lines), evaluating code quality, security basics, and test coverage. It helps ensure maintainability, security posture, and adequate tests before merging.

How This Skill Works

It analyzes changes for code quality and maintainability, checks security best practices, assesses test coverage, reviews error handling patterns, and verifies API design consistency. The output is a detailed review with categorized findings (quality, security, tests) to guide fixes.

When to Use It

• Reviewing medium-sized PRs (100-500 lines) before merging to verify quality, security basics, and test coverage
• Assessing API design consistency when the PR introduces API surface changes
• Validating error handling patterns and input validation in new/updated code
• Checking that new/updated tests adequately exercise the changes
• Providing a categorized, prioritized review to accelerate approvals

Quick Start

1. Step 1: Inspect the PR diff (100-500 lines) and run basic checks
2. Step 2: Execute the code-review-medium checks for quality, security, tests, errors, APIs
3. Step 3: Produce and share a categorized, prioritized findings report with actionable fixes

Best Practices

• Prioritize findings by impact: security and API changes first
• Cross-check test coverage against the modified code paths
• Evaluate error handling consistency and defensive coding patterns
• Review readability and maintainability: naming, modularity, and comments
• Document rationale and suggested fixes for each critical finding

Example Use Cases

• PR adding a new authentication check across services
• PR refactoring a module with API surface changes and compatibility notes
• PR introducing a new error handling path with clearer messages
• PR increasing unit/integration test coverage for core logic
• PR fixing a security vulnerability in data access or input handling

Frequently Asked Questions