Code Reviewer

소개

This skill provides a comprehensive, research-driven framework for modern code reviews, integrating OWASP Top 10 security checks with advanced SAST tool analysis from SonarQube, CodeQL, and Snyk. It balances security, code quality, and performance by identifying vulnerabilities like SQL injection and XSS alongside complex performance bottlenecks such as N+1 queries. Designed for high-velocity DevSecOps environments, it helps teams implement 2025 best practices to achieve significantly faster vulnerability remediation and maintain high standards for maintainability and scalability.

주요 기능

• OWASP Top 10 and CWE security vulnerability scanning
• Integration with SAST tools like SonarQube, CodeQL, and Snyk
• Automated quality checks for TypeScript and JavaScript standards
• Performance pattern detection for N+1 queries and O(n²) algorithms
• Standardized report generation with severity-based prioritization
• 2 GitHub stars

사용 사례

• Conducting deep security audits before merging critical feature branches
• Automating quality and performance checks during Pull Request analysis
• Integrating automated SAST scan results into human-readable review reports