AutoGineer
Generated banner for Code Review
Generated logo for Code Review

Code Review

SentryOfficialPublished by Sentry

  • Skill
  • Review and audit
  • Software development
  • Apache-2.0
  • No issues found
Download ZIP

From the author

Perform code reviews following Sentry engineering practices. Use when reviewing pull requests, examining code changes, or providing feedback on code quality. Covers security, performance, testing, and design review.
— the description by Sentry

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

This skill provides a comprehensive checklist and set of guidelines for performing code reviews. It focuses on identifying runtime errors, performance bottlenecks, security vulnerabilities, and design inconsistencies. The approach emphasizes actionable, empathetic feedback and provides specific patterns for Python, Django, and TypeScript/React environments to ensure code quality and maintainability.

What it does

  • Provides a checklist for identifying runtime errors, performance issues, and security vulnerabilities.
  • Offers guidance on assessing architectural design and component interactions.
  • Defines standards for verifying test coverage across functional, integration, and end-to-end tests.
  • Establishes communication norms for providing polite, actionable, and constructive feedback.
  • Identifies specific scenarios requiring escalation to senior engineering review.
  • Includes common code patterns to flag for Python, Django, and TypeScript/React.

When to use it

  • When reviewing pull requests to ensure code quality and project alignment.
  • When examining code changes for potential security or performance risks.
  • When providing feedback on architectural design or implementation details.
  • When verifying that new code includes appropriate test coverage.

Advantages

  • Promotes consistency in code quality across engineering teams.
  • Reduces risk by focusing on critical areas like security and performance.
  • Encourages a positive and collaborative team culture through empathetic feedback.
  • Provides clear criteria for when to approve a pull request versus requesting changes.

Usage examples

“Review this pull request for potential performance issues.”
The agent analyzes the code for N+1 queries, inefficient loops, or unnecessary allocations, providing specific feedback based on the provided patterns.
“Does this code change meet security standards?”
The agent checks for common vulnerabilities like SQL injection or XSS and suggests parameterized queries or other secure coding practices.

Install

  1. Download the skill as a ZIP:

    https://mp-staging.autogineer.com/agent-skills/getsentry/code-review/download

  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip code-review.zip -d .agents/skills

Documentation by Sentry

Sentry Code Review

Follow these guidelines when reviewing code for Sentry projects.

Review Checklist

Identifying Problems

Look for these issues in code changes:

  • Runtime errors: Potential exceptions, null pointer issues, out-of-bounds access

  • Performance: Unbounded O(n²) operations, N+1 queries, unnecessary allocations

  • Side effects: Unintended behavioral changes affecting other components

  • Backwards compatibility: Breaking API changes without migration path

  • ORM queries: Complex Django ORM with unexpected query performance

  • Security vulnerabilities: Injection, XSS, access control gaps, secrets exposure

Design Assessment

  • Do component interactions make logical sense?

  • Does the change align with existing project architecture?

  • Are there conflicts with current requirements or goals?

Test Coverage

Every PR should have appropriate test coverage:

  • Functional tests for business logic

  • Integration tests for component interactions

  • End-to-end tests for critical user paths

Verify tests cover actual requirements and edge cases. Avoid excessive branching or looping in test code.

Long-Term Impact

Flag for senior engineer review when changes involve:

  • Database schema modifications

  • API contract changes

  • New framework or library adoption

  • Performance-critical code paths

  • Security-sensitive functionality

Feedback Guidelines

Tone

  • Be polite and empathetic

  • Provide actionable suggestions, not vague criticism

  • Phrase as questions when uncertain: "Have you considered...?"

Approval

  • Approve when only minor issues remain

  • Don't block PRs for stylistic preferences

  • Remember: the goal is risk reduction, not perfect code

Common Patterns to Flag

Python/Django
# Bad: N+1 query
for user in users:
    print(user.profile.name)  # Separate query per user

# Good: Prefetch related
users = User.objects.prefetch_related('profile')
TypeScript/React
// Bad: Missing dependency in useEffect
useEffect(() => {
  fetchData(userId);
}, []);  // userId not in deps

// Good: Include all dependencies
useEffect(() => {
  fetchData(userId);
}, [userId]);
Security
# Bad: SQL injection risk
cursor.execute(f"SELECT * FROM users WHERE id = {user_id}")

# Good: Parameterized query
cursor.execute("SELECT * FROM users WHERE id = %s", [user_id])

References

Files

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Needs Python

Security

No issues found by our static scan· No issues found

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Published by
Sentry
Publisher
Sentry (Official)
Source
getsentry/skills · skills/code-review · commit e94f222
Licence
Apache License 2.0 (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by Sentry.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download code-review.zip