code-review

Comprehensive, multi-dimensional code review skill grounded in best practices from "Looks Good to Me" (Braganza, 2025), the OWASP Code Review Guide v2, Learning Domain-Driven Design (Khononov), High Performance SRE (Mishra), Software Security for Developers (Saikali & Spilca), Supply Chain Software Security (Syed), and Identity Security for Software Development (Walsh et al.). Use this skill whenever the user asks to review code, critique a pull request, audit a module, check an implementation for correctness or security, or give feedback on code quality. Also trigger on "review this," "what's wrong with this code," "is this secure," "does this follow best practices," "check my PR," or "what do you think of these changes." The skill goes well beyond style — it checks for architectural soundness, domain model integrity, operational reliability, supply chain risks, identity/access vulnerabilities, and security flaws that automated linters miss.