code-review-checklist — Claude Code skill: a checklist for code review

What code-review-checklist does

The skill splits a review into six steps. First comes context: what problem the code solves, what the requirements are, which files changed and why. Then functionality, code quality, security, performance and tests, each with its own set of questions so nothing slips through.

Inside are markdown checklists for functionality, security and code quality. Every item comes with a bad-and-good JavaScript pair: missing validation next to email and password-length checks, a concatenated SQL string next to a parameterized query, a hardcoded key next to an environment variable. One example shows a function doing too much, followed by the same logic split into separate calls.

The security checklist names what to look for: input validation, SQL injection and XSS, CSRF, password hashing, token expiry, vulnerable dependencies. That makes the skill worth adding where user input and secrets reach the repository — on a prototype with no external data it adds little.