Slash Command790 repo starsupdated 12d ago

code-review

# ClaudeWave Code Review The code-review command performs automated security and quality analysis of uncommitted code changes in a Git repository. Use this command before committing to identify critical security vulnerabilities like hardcoded credentials and injection risks, plus code quality issues such as oversized functions and missing error handling across changed files.

View source Repository: claude-forge

Install in Claude Code

Copy

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/sangrokjung/claude-forge/HEAD/commands/code-review.md -o ~/.claude/commands/code-review.md

Then start a new Claude Code session; the slash command loads automatically.

Definition

code-review.md

# Code Review

Comprehensive security and quality review of uncommitted changes:

1. Get changed files: git diff --name-only HEAD

2. For each changed file, check for:

**Security Issues (CRITICAL):**
- Hardcoded credentials, API keys, tokens
- SQL injection vulnerabilities
- XSS vulnerabilities  
- Missing input validation
- Insecure dependencies
- Path traversal risks

**Code Quality (HIGH):**
- Functions > 50 lines
- Files > 800 lines
- Nesting depth > 4 levels
- Missing error handling
- console.log statements
- TODO/FIXME comments
- Missing JSDoc for public APIs

**Best Practices (MEDIUM):**
- Mutation patterns (use immutable instead)
- Emoji usage in code/comments
- Missing tests for new code
- Accessibility issues (a11y)

3. Generate report with:
   - Severity: CRITICAL, HIGH, MEDIUM, LOW
   - File location and line numbers
   - Issue description
   - Suggested fix

4. Block commit if CRITICAL or HIGH issues found

Never approve code with security vulnerabilities!

---

## 다음 단계

| 리뷰 후 | 커맨드 |
|:--------|:-------|
| 빌드/테스트 검증 | `/handoff-verify` |
| 바로 커밋 | `/commit-push-pr` |