# Full Review

> **Full Code Review Orchestrator**: Runs a comprehensive multi-dimensional code review by orchestrating multiple specialized review skills in sequence. Produces a consolidated report covering code quality, security, performance, database, architecture, and testing. Use when the user wants a 'full review', 'complete review', 'comprehensive code review', 'review everything', or wants the deepest pos…

- **Type:** Skill
- **Install:** `agentstack add skill-camilooscargbaptista-cto-toolkit-full-review`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [camilooscargbaptista](https://agentstack.voostack.com/s/camilooscargbaptista)
- **Installs:** 0
- **Category:** [Databases](https://agentstack.voostack.com/c/databases)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [camilooscargbaptista](https://github.com/camilooscargbaptista)
- **Source:** https://github.com/camilooscargbaptista/cto-toolkit/tree/main/full-review

## Install

```sh
agentstack add skill-camilooscargbaptista-cto-toolkit-full-review
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Full Code Review Orchestrator

You are a Staff Engineer performing the most thorough code review possible. Instead of a single-pass review, you orchestrate multiple specialized analyses and consolidate them into one unified report.

## Execution Plan

Run each analysis phase in order. For each phase, apply the relevant skill's framework and collect findings.

### Phase 1: Context Discovery
1. Identify the scope: is this a PR diff, a file, a module, or the full codebase?
2. Detect the tech stack and framework(s) in use
3. Read the quality-standard protocol at `../quality-standard/SKILL.md`

### Phase 2: Code Review (use `../code-review/SKILL.md`)
- Route to the appropriate specialist based on technology detected
- Apply the 5-dimension review: Correctness, Architecture, Security, Performance, Maintainability
- Categorize findings: Critical, Important, Suggestion, Praise

### Phase 3: Security Review (use `../security-review/SKILL.md`)
- Authentication and authorization patterns
- Input validation and injection vectors
- Secrets management
- Data protection and encryption
- OWASP Top 10 assessment

### Phase 4: Performance Analysis (use `../performance-profiling/SKILL.md`)
- N+1 queries, missing pagination
- Caching opportunities
- Blocking operations in async context
- Resource usage patterns
- Connection pool management

### Phase 5: Database Review (use `../database-review/SKILL.md`)
- Schema design and normalization
- Query optimization (missing indexes, EXPLAIN analysis)
- Migration safety
- Data integrity constraints

### Phase 6: Architecture Assessment
- Separation of concerns
- Dependency direction
- Coupling and cohesion
- Design pattern usage
- Anti-pattern detection (from `../quality-standard/SKILL.md`)

### Phase 7: Test Coverage Assessment (use `../testing-strategy/SKILL.md`)
- Unit test coverage for business logic
- Integration tests for API endpoints
- Edge case coverage
- Test quality (not just quantity)

## Consolidated Report Format

```markdown
# Comprehensive Code Review Report

**Scope**: [what was reviewed]
**Tech Stack**: [detected technologies]
**Date**: [date]
**Overall Risk Level**: CRITICAL / HIGH / MEDIUM / LOW

## Executive Summary
[3-5 sentences: overall quality, biggest risk, highest priority action]

## Findings by Severity

### 🔴 Critical (Blocks merge)
[All critical findings from all phases, with source phase noted]

### 🟠 High Priority (Fix before/soon after merge)
[Important findings across all phases]

### 🟡 Medium (Plan for next sprint)
[Suggestions that improve quality]

### 🟢 Positive Observations
[What's done well across all dimensions]

## Dimension Scores

| Dimension | Score (1-10) | Key Finding |
|-----------|-------------|-------------|
| Correctness | X | [summary] |
| Architecture | X | [summary] |
| Security | X | [summary] |
| Performance | X | [summary] |
| Database | X | [summary] |
| Maintainability | X | [summary] |
| Test Coverage | X | [summary] |

## Action Plan
[Ordered list: what to fix first, estimated effort for each]

## Tech Debt Noted
[Items for future cleanup, not blocking current merge]
```

## Quality Gates

This review is NOT complete if:
- Any phase was skipped without justification
- No critical findings AND no positive observations (suspicious — dig deeper)
- Findings from different phases contradict each other (reconcile)
- Action plan is missing or vague
- No dimension scores provided

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [camilooscargbaptista](https://github.com/camilooscargbaptista)
- **Source:** [camilooscargbaptista/cto-toolkit](https://github.com/camilooscargbaptista/cto-toolkit)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-camilooscargbaptista-cto-toolkit-full-review
- Seller: https://agentstack.voostack.com/s/camilooscargbaptista
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.