# review.md
# .claude/skills/review.md

Perform a thorough code review on the specified file or diff.

## Input:
User can provide: file path, PR diff, or just "review this"

## Steps:
1. If file path given: read the file
2. If "review this": run `git diff --staged` or read the current file in context
3. Analyze for:

### Security Issues [CRITICAL]
- SQL/NoSQL injection
- XSS vulnerabilities
- Exposed secrets or tokens
- Insecure deserialization
- Missing authentication/authorization checks

### Logic Issues [MAJOR]
- Race conditions
- Null pointer / undefined handling
- Off-by-one errors
- Business logic correctness

### Performance Issues [MAJOR]
- N+1 queries
- Missing indexes
- Unbounded loops
- Memory leaks

### Code Quality [MINOR]
- Missing error handling
- Missing type hints
- Unclear variable names
- Duplicated code

4. Output as organized list by severity
5. End with: "Total: X critical, Y major, Z minor issues"

## Rules:
- Be direct, not diplomatic
- Show the problematic code, not just describe it
- Suggest the fix, not just the problem

Skills ו-Slash Commands — אוטומציה חכמה

Skills ו-Slash Commands — אוטומציה חכמה

Skills ו-Slash Commands — אוטומציה חכמה