brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews public API and contract changes for safety: backward compatibility (versioned/deprecated if breaking), hard-to-misuse shapes, "when in doubt leave it out" on new surface, typed and stable error contracts, idempotency for unsafe operations, pagination and rate limits on collections, contract tests, and no…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews a standardized non-source artifact against its own published "well-formed X" standard rather than as application code — the artifact review shape (D15), presence-activated. On detecting a supported artifact it loads that artifact's rubric and reviews against it. Supported artifact: a SKILL.md / agent-skill…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews whether a change fits one coherent model of what the product is — Brooks's conceptual integrity, the product counterweight to sprawl. Checks for a new user-facing concept duplicating one the product already has (two nouns for one idea), a second path to a job it already does, a rule it already enforces that…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews concurrent and async code for races and ordering bugs: shared mutable state without synchronization, check-then-act spanning an await, lost updates from interleaved requests, lock ordering, unawaited promises, accidental sequential awaits, non-idempotent message consumers, exactly-once assumptions, and missing…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews the analytics/data plane — SQL/dbt transformations, data tests, and event or published-table schemas — for transformation correctness, data-test adequacy, and producer-to-consumer data-contract safety: violated grain and fan-out joins that silently inflate aggregates, SQL NULL traps (NOT IN with NULLs, a LEFT…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews a decision as it is made — an ADR, RFC, design doc, adoption PR, or deprecation/rollout plan — rather than the code that implements it: is the choice (dependency, framework, platform, build-vs-buy) justified against cheaper options; is lock-in and exit cost assessed; is the rationale and its assumptions…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews a change for diff-visible, code-level ethical / responsible-design defects — the non-ML analog of harmful-output review, a sibling of security (harm to the user/subject, not via an attacker): dark patterns and deceptive flows (sneaking, fabricated urgency/scarcity, misdirection/confirmshaming, obstruction…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews a change for the experience of the people who consume this software — installing, configuring, and upgrading it — distinct from the decision-lifecycle lens's "should we adopt this dependency" call and from end-user product UX. Covers setup friction and undocumented prerequisites; configuration ergonomics (safe…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews a change for interoperability — whether the code correctly speaks the external standards and protocols it claims to (ISO/IEC 25010:2023). Consolidates conformance checks scattered across other lenses: HTTP semantics (safe/idempotent methods, status codes, conditional requests, caching); OAuth 2.0 / OIDC flow…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews LLM/AI integration code for prompt-injection surface, the lethal trifecta, unvalidated model output, missing eval coverage, unpinned models, unbounded token/cost, and PII sent to third-party models. Use when reviewing code that calls an LLM or model API, builds prompts, parses model output, or wires up agents…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews schema migrations and data changes for safety: backward compatibility with the running app (expand/migrate/contract), table locks from NOT NULL/index/FK on large tables, unbatched backfills, missing dual-write during transitions, irreversible or destructive DDL, and integrity constraints left to app code. Use…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews module and type design: cohesion and coupling (via connascence), encapsulation, hard-to-misuse interfaces, and making illegal states unrepresentable. Use when reviewing class/module structure, interfaces, type or data modeling, coupling, or API ergonomics for callers.
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews code for naming and local readability: intention-revealing names vs placeholders, function length and cyclomatic/cognitive complexity, deep nesting, magic numbers/strings, mixed levels of abstraction, and comment accuracy. Use when reviewing readability, naming, complexity, nesting, magic values, or comments.
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews changes for production operability: structured logs with consistent fields and correlation/trace IDs, right log levels with no PII, context-rich errors that wrap rather than swallow, golden-signal instrumentation and propagated trace context, liveness/readiness checks, kill switches for risky changes, graceful…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews whether a change that claims a user or business benefit can be told to have worked — the question no other lens asks. Is an outcome stated rather than only an output; does the instrumentation that would observe it ship in the same diff (deferred tracking leaves the feature live and permanently unmeasured)…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews changes for performance and efficiency problems: N+1 queries, await-in-loop and chatty per-item I/O, accidental O(n²) on hot paths, recomputed expensive values, caches without invalidation, buffering whole payloads instead of streaming, allocation pressure, bundle/startup bloat, and per-request cloud cost.…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews the PR itself rather than just the code: size and single purpose (<=400 net LOC), atomic commits with imperative why-bearing messages, correct conventional type and breaking-change signaling, risk and rollback notes, docs/changelog updated with the API surface, no drive-by scope creep, no committed secrets or…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews a change or design for operational resilience and scale: unbounded queues/buffers/result sets, missing timeouts and failure plans on calls to other services, blast radius and bulkheading, retry budgets and idempotency, in-process state that blocks horizontal scaling, single-writer bottlenecks, recoverability…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews tests for quality: behavior vs implementation coupling, over-mocking, meaningful branch/edge coverage on the diff, regression tests for bug fixes, isolation and determinism (no shared state, real clocks, or unseeded randomness), right level per the pyramid/trophy, and disabled/focused tests sneaking in. Use…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Threat-models a system or design for security at design time — enumerates what an adversary could do boundary by boundary (STRIDE, trust boundaries, data-flow, attack trees, abuse cases) and whether each threat is mitigated, rather than pattern-matching existing code for vulnerabilities. Works on a design doc or RFC…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Reviews a user-facing change for interaction quality — whether a person can tell what is happening, do what they came to do, and recover when it goes wrong. Grounded in Nielsen's 10 usability heuristics: state completeness (an async read produces loading, empty, and error states whether or not anyone designed them)…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Sweeps changes for security risks: injection (SQL/command/XSS) from unparameterized or unencoded untrusted input, missing authorization on object references (IDOR), missing segregation of duties / maker-checker on high-consequence workflows, hardcoded secrets, weak or homegrown crypto, unsafe deserialization, SSRF…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Merges the findings of several code-quality-atlas lenses — and of any other review method run alongside them (the built-in code-review skill, a framework review like BMAD, linter output, or human notes) — into one review: deduplicates issues raised by more than one source, reconciles lenses that pull opposite ways…
brandondees/code-quality-atlas
Skill Claude CodeCodex
Traces whether a change actually does what it claims: invariants and postconditions preserved on every branch, boundary values (0, 1, n-1, empty, max, negative) handled, off-by-one in ranges and loop bounds, null/undefined checked at boundaries, exhaustive switch/match, resource cleanup on all paths, money as integer…