code-review-five-axis

Reviews code changes across correctness, readability, architecture, security, and performance axes.

Updated Mar 3, 2026
One-click install
npx skills add https://github.com/manhthien2005/PM_REVIEW --skill code-review-five-axis-manhthien2005
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review-five-axis
Source: https://github.com/manhthien2005/PM_REVIEW/tree/main/tooling/.windsurf-template/shared/skills/code-review-five-axis
Command: npx skills add https://github.com/manhthien2005/PM_REVIEW --skill code-review-five-axis-manhthien2005

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Code reviews often become rubber-stamps or get lost in nitpicks, letting bugs, security holes, and performance issues slip into production. This Skill provides a structured five-axis framework so every self-review or PR review covers the same critical ground consistently. ## Core Features & Use Cases - Five-Axis Evaluation: Systematic checklists covering correctness, readability, architecture, security, and performance, with concrete items like N+1 queries, auth checks, and race conditions. - Severity-Based Reporting: Outputs findings classified as Critical, Important, Suggestion, or Good, so reviewers focus on merge-blocking issues first. - Anti-Pattern Guardrails: Explicitly warns against rubber-stamping, bikeshedding, and scope creep during reviews. - Use Case: After finishing a bug fix on a Flutter/Firestore feature, run this Skill before opening a PR to catch a missing auth check and an unhandled DioException, then produce a severity-ranked review report. ## Quick Start Ask the AI to review the current branch diff using the five-axis code review framework and report findings by severity.

Frequently Asked Questions about code-review-five-axis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my own code before opening a pull request?▼

Run the five-axis checklist against your diff: verify correctness against the spec, check readability and naming, confirm architecture layering, audit security items like auth checks and input validation, and look for performance issues such as N+1 queries. Report findings by severity before committing.

What should a code review checklist include?▼

A thorough checklist covers five areas: correctness (edge cases, error paths, concurrency), readability (naming, function size, comments explaining why), architecture (layering, dependency direction, DI), security (secrets, validation, authorization), and performance (pagination, indexes, memory disposal).

Does this review framework work for Flutter and Firestore projects?▼

Yes, the checklists include Flutter and Firestore specific items such as const constructors, ListView.builder, stream disposal, Firestore compound query indexes, and avoiding full-collection reads. It also covers TypeScript and Cloud Functions concerns like cold starts and zod validation.

When should I use a quick review versus a deep feature audit?▼

Use this five-axis review for fast self-checks before commits and PR reviews, typically a 5 to 15 minute pass. For stakeholder-facing deep audits with scoring criteria and formal reports, use a dedicated detailed feature review skill instead.

What are common code review anti-patterns to avoid?▼

Common anti-patterns include approving without reading carefully, bikeshedding naming while critical bugs remain unresolved, suggesting full module rewrites in small PRs, and blocking merges over personal style preferences. Focus on severity-ranked issues that affect correctness and security first.