What It Reviews
Code Quality
- Logic correctness and error handling
- Resource management and naming conventions
- Code organization and function complexity
- Duplication detection and readability
Security
- Input validation and injection vulnerabilities
- Authentication and authorization checks
- Cryptographic practices and sensitive data handling
- Dependency scanning and configuration security
Performance
- Algorithm efficiency and database queries
- Memory usage and CPU utilization
- Caching opportunities and I/O operations
Standards
- Code coverage > 80% verification
- Cyclomatic complexity < 10
- Documentation completeness
- Best practices compliance
How It Works
The agent is triggered when you ask Claude Code to review code. It:
- Scans the code changes or specified files
- Runs through its security, quality, and performance checklists
- Provides structured feedback with severity ratings
- Suggests specific fixes with code examples
Example Usage
You: Review the changes in src/auth/ before I merge this PR
Claude: [Activates code-reviewer agent, performs systematic review]