code-test-review-skill_skill

Overview

This skill is an advanced code testing and review expert system that delivers comprehensive code quality analysis, security assessments, performance insights, and test strategy design. It orchestrates multiple specialist personas and integrates automated tools to produce prioritized remediation plans and CI-ready quality checks. The outcome is measurable quality improvement and actionable roadmaps for technical debt reduction.

How this skill works

The system performs staged analysis: static scanning to establish a baseline, deep architecture and design reviews, test strategy generation, and focused security and performance assessments. Multiple expert modules cross-validate findings, produce severity-ranked issues, and synthesize a final report with remediation steps, test artifacts, and CI/CD integration recommendations. Outputs include quality metrics, technical debt quantification, and an executable action plan.

When to use it

• Before a major release to catch quality, security, and performance regressions
• When designing or validating a comprehensive test strategy for a project
• To assess and prioritize technical debt across a codebase
• When you need a security-focused review or OWASP-aligned vulnerability scan
• To identify performance bottlenecks and propose optimization strategies

Best practices

• Provide a representative code snapshot and test data to improve scan accuracy
• Run the review as part of CI to detect regressions early and enforce quality gates
• Set clear coverage and risk targets so test strategy recommendations align with business priorities
• Prioritize fixes by combined severity, exploitability, and development cost
• Use the generated quality metrics to track improvements over time

Example use cases

• Full-stack application review: produce a single report covering static issues, security findings, test gaps, and performance hotspots
• Authentication system security assessment: focused OWASP checks, threat modeling, and remediation plan
• Microservices performance audit: profiling, complexity analysis, and caching or concurrency recommendations
• API test strategy design: select frameworks, define unit/integration/e2e scenarios, and CI automation plan
• Technical debt triage: quantify debt, prioritize hotspots, and create a phased remediation roadmap