---
name: Code Review Patterns
slug: code-review-patterns
category: Quality
description: Code Review Patterns assesses code for security, quality, performance, and maintainability, with confidence-gated findings and a required router contract. Use it during build, debug, or full review workflows.
github: "https://github.com/a5c-ai/babysitter/tree/main/library/methodologies/cc10x/skills/code-review-patterns"
language: JavaScript
stars: 1669
forks: 98
install: "npx degit https://github.com/a5c-ai/babysitter/tree/main/library/methodologies/cc10x/skills/code-review-patterns ~/.claude/skills/code-review-patterns"
installs_to: ~/.claude/skills/code-review-patterns
source_path: library/methodologies/cc10x/skills/code-review-patterns/SKILL.md
collection_size: 36
category_size: 1354
collection_url: "https://dirskills.com/collections/a5c-ai/babysitter"
added: 2026-08-12T04:43:02.771Z
last_synced: 2026-08-12T04:43:02.771Z
canonical_url: "https://dirskills.com/skills/code-review-patterns"
---

# Code Review Patterns

Code Review Patterns assesses code for security, quality, performance, and maintainability, with confidence-gated findings and a required router contract. Use it during build, debug, or full review workflows.

**Install:**

```bash
npx degit https://github.com/a5c-ai/babysitter/tree/main/library/methodologies/cc10x/skills/code-review-patterns ~/.claude/skills/code-review-patterns
```

## README

- Injection vulnerabilities (SQL, XSS, command)
- Authentication and authorization patterns
- Secrets handling (no hardcoded credentials)
- Input validation and sanitization

### Quality (weight: 25%)
- Naming conventions and consistency
- Code structure (SRP, cohesion, coupling)
- Error handling completeness
- Type safety (no `any` escapes)

### Performance (weight: 20%)
- Algorithmic complexity (flag O(n^2) or worse)
- Resource and memory leaks
- Database query efficiency (N+1)
- Caching opportunities

### Maintainability (weight: 25%)
- Documentation (JSDoc/TSDoc for public APIs)
- Test coverage adequacy
- Readability (function length, nesting depth)
- Tech debt markers (TODO, FIXME)

## Confidence Gating

- Only report issues with confidence >= 80%
- Empty catch blocks are always critical (100% confidence)
- Classify: critical, high, medium, low
- Include actionable remediation for each issue

## Router Contract

Every review must produce: STATUS, BLOCKING, REQUIRES_REMEDIATION, issue counts.

## When to Use

- Code review step in BUILD workflow
- Fix review in DEBUG workflow
- Full REVIEW workflow

## Agents Used

- `code-reviewer` (primary consumer)
- `silent-failure-hunter` (error handling dimension)