Skip to content

Use Case: Review & Quality

Profile: Senior Developer, reviewing code before creating a PR

“Is this code ready to merge?”

Tool: /code-review (command) invokes code-reviewer agent (Sonnet)

InputUncommitted code changes (git diff)
OutputReview report: security issues, code quality, patterns. Only flags issues with >80% confidence. Verdict: approve/needs-changes

“Check the Python code specifically for type hints and Pythonic patterns.”

Tool: python-reviewer agent (Sonnet) - invoke directly or via /python-review

InputPython code changes
OutputPython-focused review: security (bandit), types (mypy), style (ruff), PEP 8 compliance

“This touches authentication - check it for vulnerabilities.”

Tool: security-reviewer agent

InputCode with security-sensitive changes (auth, input handling, crypto)
OutputSecurity analysis: OWASP top 10, injection, auth bypasses, secrets, dependencies

Profile: Senior Developer, reviewing a teammate’s TypeScript PR

“Review this TypeScript PR for type safety and async correctness.”

Tool: typescript-reviewer agent (Sonnet)

InputTypeScript/JavaScript code changes
OutputTS review: any usage, non-null assertions, unhandled promises, React dependency arrays, XSS vectors

ToolFocusBest forModel
/code-reviewGeneral quality + securityFirst-pass review of any languageSonnet
python-reviewerPython idioms, types, securityPython-specific deep reviewSonnet
typescript-reviewerTS type safety, async, ReactTypeScript/JavaScript deep reviewSonnet
security-reviewerVulnerabilities onlySecurity-sensitive changesOpus

Recommended flow: Start with /code-review for a general pass, then follow up with a language-specific reviewer if needed. Use security-reviewer for auth, payment, or input-handling changes.