query-review

Review an authorized codebase for ORM misuse, N+1 query patterns, authorization-after-fetch bugs, raw SQL risks, cache key collisions, and missing tenant scopes. Use for data-access layers and securit

SKILL.md

GitHub

Query Review

Focus

  • missing tenant scopes
  • authorization after broad fetches
  • raw SQL without parameter binding
  • N+1 patterns that become availability or side-channel issues
  • eager loads that overexpose sensitive associations
  • cache keys missing tenant or role context

Heuristic

Treat data-access issues as security-relevant when they change scope, leak metadata, or undermine availability controls.

Похожие навыки: other

limits-colimits

Context management for Claude Code. Hooks maintain state via ledgers and handoffs. MCP execution without context polluti...

Автор: parcadei
3,392

ddttom-allaboutv2-claude-skills-block-collection-and-party

The Block Collection and Block Party are repositories for existing AEM blocks, build tools, code snippets, integration p...

Автор: mattnigh
20

nodnarbnitram-claude-code-extensions-claude-skills-esphome-confi

This skill should be used when the user asks to "create an esphome config", "set up an esp32 device", "configure esphome...

Автор: mattnigh
20