code▌

../../../engineering-team/code-reviewer/SKILL.md

Systematic code maturity evaluation across 9 security and engineering categories with evidence-based ratings. \n \n Assesses arithmetic safety, auditing, access controls, complexity, decentralization, documentation, MEV risks, low-level code, and testing using Trail of Bits' framework \n Produces a maturity scorecard with 0–4 ratings per category, detailed findings with file references, and a priority-ordered improvement roadmap \n Combines automated code analysis with interactive clarification

Custom security implementations for authentication, authorization, input validation, and OWASP Top 10 vulnerability prevention. \n \n Covers password hashing (bcrypt/argon2), parameterized SQL queries, JWT validation, and rate limiting with explicit code examples \n Includes validation checkpoints for authentication (brute-force, session fixation, token expiration), authorization (privilege escalation), input handling (SQL injection, XSS), and security headers \n Enforces must-do constraints: ha

Measure and analyze code quality metrics to identify complexity, maintainability issues, and areas for improvement.

Load with: base.md

Comprehensive security rules for writing secure code across 15+ languages. Covers OWASP Top 10, infrastructure security, and coding best practices with 28 rule categories.

This skill identifies anti-patterns that violate amplihack's development philosophy and provides constructive, specific fixes. It ensures code maintains ruthless simplicity, modular design, and zero-BS implementations.

Generate beautiful code snippet images using ray.so and save them locally.

Provides structured code review for NestJS applications. Findings categorized by severity (Critical, Warning, Suggestion) with actionable recommendations. Delegates to nestjs-code-review-expert agent for deep analysis.

Load with: base.md + [codex-review.md for OpenAI Codex] + [gemini-review.md for Google Gemini]