Slash Command791 estrellas del repoactualizado 12d ago

code-review

# ClaudeWave Code Review The code-review command performs automated security and quality analysis of uncommitted code changes in a Git repository. Use this command before committing to identify critical security vulnerabilities like hardcoded credentials and injection risks, plus code quality issues such as oversized functions and missing error handling across changed files.

Ver fuente Repositorio: claude-forge

Instalar en Claude Code

Copiar

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/sangrokjung/claude-forge/HEAD/commands/code-review.md -o ~/.claude/commands/code-review.md

Después abre una sesión nueva de Claude Code; el slash command carga automáticamente.

Definición

code-review.md

# Code Review

Comprehensive security and quality review of uncommitted changes:

1. Get changed files: git diff --name-only HEAD

2. For each changed file, check for:

**Security Issues (CRITICAL):**
- Hardcoded credentials, API keys, tokens
- SQL injection vulnerabilities
- XSS vulnerabilities  
- Missing input validation
- Insecure dependencies
- Path traversal risks

**Code Quality (HIGH):**
- Functions > 50 lines
- Files > 800 lines
- Nesting depth > 4 levels
- Missing error handling
- console.log statements
- TODO/FIXME comments
- Missing JSDoc for public APIs

**Best Practices (MEDIUM):**
- Mutation patterns (use immutable instead)
- Emoji usage in code/comments
- Missing tests for new code
- Accessibility issues (a11y)

3. Generate report with:
   - Severity: CRITICAL, HIGH, MEDIUM, LOW
   - File location and line numbers
   - Issue description
   - Suggested fix

4. Block commit if CRITICAL or HIGH issues found

Never approve code with security vulnerabilities!

---

## 다음 단계

| 리뷰 후 | 커맨드 |
|:--------|:-------|
| 빌드/테스트 검증 | `/handoff-verify` |
| 바로 커밋 | `/commit-push-pr` |

Del mismo repositorio

architectSubagent

build-error-resolverSubagent

code-reviewerSubagent

database-reviewerSubagent

Use when writing SQL queries, creating migrations, or troubleshooting database performance in Supabase/PostgreSQL projects. Reviews indexes, RLS policies, schema types, N+1 patterns. Read-only reviewer with EXPLAIN ANALYZE capability.

doc-updaterSubagent

e2e-runnerSubagent

plannerSubagent

refactor-cleanerSubagent