code▌

Expert code review of current git changes with a senior engineer lens. \n \n Detects SOLID violations (SRP, OCP, LSP, ISP, DIP), architecture smells, and proposes incremental refactors with clear rationale \n Scans for security risks including injection, XSS, AuthZ gaps, race conditions, and unsafe deserialization with exploitability assessment \n Identifies removal candidates and unused code with safe deletion vs. deferred plans and concrete follow-up checkpoints \n Flags code quality issues: e

Custom security implementations for authentication, authorization, input validation, and OWASP Top 10 vulnerability prevention. \n \n Covers password hashing (bcrypt/argon2), parameterized SQL queries, JWT validation, and rate limiting with explicit code examples \n Includes validation checkpoints for authentication (brute-force, session fixation, token expiration), authorization (privilege escalation), input handling (SQL injection, XSS), and security headers \n Enforces must-do constraints: ha

Refactor Python scripts into beginner-friendly projects with instructional comments and markdown tutorials. \n \n Applies PEP 8 style guide compliance and standard Python best practices to improve code quality \n Adds instructional comments throughout the code explaining logic, reasoning, and importance for learners \n Generates a complete README.md tutorial with project overview, setup instructions, code breakdown, usage examples, and sample output \n Renames unclear variables and functions for

Dispatch code review subagents with focused context to catch issues before they compound. \n \n Integrates with subagent-driven development workflows, triggering review after each task or before merging to main \n Provides code-reviewer subagent with precise git SHAs, implementation details, and requirements, keeping reviewer focused on work product rather than session history \n Categorizes feedback into Critical (fix immediately), Important (fix before proceeding), and Minor (note for later) s

Evaluate code review feedback with technical rigor before implementing, avoiding performative agreement and blind implementation. \n \n Verify feedback against actual codebase behavior, test coverage, and architectural context before proceeding \n Ask for clarification on unclear items before implementing anything; partial understanding leads to wrong fixes \n Push back on suggestions that break functionality, lack context, violate YAGNI, or conflict with established decisions using technical re

This skill safely identifies and removes unused code across multiple programming languages. It includes comprehensive safety checks to prevent removing code that's actually needed.

Load with: base.md + [codex-review.md for OpenAI Codex] + [gemini-review.md for Google Gemini]

Webflow custom code: register (store script) → apply (attach to site). Inline scripts only via MCP (max 10,000 chars).

Process: Explore → Plan → Code → Commit

Expert guidance for writing Python code in n8n Code nodes.