Our review
Performs a quick, focused code review on specific files or recent changes (diff, staged, last commit).
Strengths
- Catches common bugs and security vulnerabilities
- Provides concrete fix suggestions with before/after code
- Classifies issues by severity (critical, warning, suggestion)
- Adapts to project-specific patterns (WebFlux, virtual threads)
Limitations
- Does not replace a thorough human review
- May miss complex business logic issues
- Relies on the quality of the provided diff or files
For a first-level check before merging, quick feedback on existing code, or verifying best practices in a changed file.
For an architectural review or deep semantic analysis requiring detailed domain understanding.
Security analysis
SafeThe skill instructs the agent to perform code review using safe operations like reading files and running git diff/show commands. No destructive actions, exfiltration, or unsafe command execution is involved. User input is used as arguments to git, which is not a shell injection risk here.
No concerns found
Examples
/review src/main/java/com/example/service/ForecastService.java/review changes/review last-commitname: review description: Quick code review for files or recent changes, checking for bugs, best practices, and potential improvements
Review Skill
Perform a quick, focused code review on specified files or recent git changes.
Instructions
1. Determine Review Scope
Parse the user's request to determine what to review:
- Specific file(s):
/review src/main/java/.../MyService.java - Recent changes:
/review changesor/review diff - Staged changes:
/review staged - Last commit:
/review last-commit - Feature/component:
/review ForecastService(find and review related files)
2. Gather Code to Review
Based on scope:
For specific files:
- Use
Readto load the file content
For git changes:
- Use
Bashwithgit difffor unstaged changes - Use
Bashwithgit diff --cachedfor staged changes - Use
Bashwithgit show HEADfor last commit - Use
Bashwithgit diff HEAD~Nfor recent N commits
For component/feature:
- Use
GlobandGrepto find relevant files - Read the main files involved
3. Review Checklist
Analyze the code for:
Correctness
- Logic errors or bugs
- Off-by-one errors
- Null/undefined handling
- Edge cases not covered
- Incorrect assumptions
Security
- Input validation issues
- Injection vulnerabilities (SQL, command, XSS)
- Hardcoded secrets or credentials
- Unsafe data handling
Performance
- Inefficient algorithms (O(n²) when O(n) possible)
- Unnecessary iterations or allocations
- Missing caching opportunities
- Blocking calls in reactive code
Best Practices
- Code style consistency
- Naming conventions
- Error handling patterns
- Resource cleanup (try-with-resources, close())
- Thread safety in concurrent code
Maintainability
- Code duplication
- Overly complex methods (consider splitting)
- Missing or misleading comments
- Dead code
Project-Specific (varun.surf)
- Reactive patterns (WebFlux compliance)
- Proper use of virtual threads/StructuredTaskScope
- Cache invalidation concerns
- External API error handling
4. Severity Levels
Categorize findings:
- Critical: Bugs, security issues, data loss risks
- Warning: Performance issues, bad practices, potential bugs
- Suggestion: Style improvements, minor optimizations, readability
Output Format
## Code Review: [File/Scope]
### Summary
- Files reviewed: X
- Lines analyzed: Y
- Issues found: Z (X critical, Y warnings, Z suggestions)
### Critical Issues
#### [Issue Title]
**File**: `path/to/file.java:line`
**Problem**: [Description]
**Fix**: [Suggested solution]
```java
// Before
problematic code
// After
fixed code
Warnings
[Issue Title]
File: path/to/file.java:line
Problem: [Description]
Suggestion: [How to improve]
Suggestions
file.java:42- Consider extracting this to a methodfile.java:78- Variable name could be more descriptive
What Looks Good
- Proper error handling in [location]
- Good use of [pattern/practice]
- Clean separation of concerns
Files Reviewed
path/to/file1.java- [brief note]path/to/file2.java- [brief note]
## Examples
```bash
# Review a specific file
/review src/main/java/com/github/pwittchen/varun/service/ForecastService.java
# Review recent uncommitted changes
/review changes
# Review staged changes before commit
/review staged
# Review the last commit
/review last-commit
# Review a component by name
/review AggregatorService
# Review multiple files
/review src/main/java/.../controller/*.java
Notes
- Keep reviews focused and actionable
- Prioritize critical issues over style nitpicks
- Provide concrete fix suggestions, not just problem descriptions
- Reference project patterns from CLAUDE.md when relevant
- For large diffs, focus on the most impactful changes
- Don't repeat issues that appear multiple times; note "X similar occurrences"
Next.js App Router Expert
Development
A skill that turns Claude into a Next.js App Router expert.
README Generator
Development
Creates professional and comprehensive README.md files for your projects.
API Documentation Writer
Development
Generates comprehensive API documentation in OpenAPI/Swagger format.