How does this skill differ from a standard AI chat prompt for code reviews?

This skill provides a structured, multi-lens analysis of code diffs, identifying risks across six categories and providing actionable fix plans rather than just high-level feedback.

Which AI agents and platforms are compatible with this skill?

The Depth Pack is designed for any AI agent that supports file or text input; simply provide the git diff or PR content to the agent to trigger the structured review process.

Does this skill automatically apply fixes or merge pull requests?

No, this skill provides evidence-based findings and suggested fixes, but it requires human verification and manual implementation to ensure code integrity.

What exactly is included in the purchase of the Code Review Depth Pack?

You receive the full logic framework for the Depth Pack, including the structured severity rating system, the six-lens analysis criteria, and the merge checklist template.

Will I receive updates if the review criteria or severity logic are improved?

Yes, purchasers receive access to future updates and refinements to the review lenses as Cygnix Labs optimizes the skill for evolving coding standards.

Code Review Depth Pack — Severity + Fix Plan

Code review: Add password reset token endpoint

Intent: Add password reset token endpoint
Scope: Express router snippet
Stack: Node, Express, Postgres
Risk context: Auth and user data
Base: Not stated
Generated: 2023-10-27 · Draft for human verification

1. Executive readout

Merge recommendation: hold
Blockers (critical/high): 2 — SQL Injection and lack of token expiration.
Notable mediums: 1 — Potential for email enumeration.
Confidence in this review: high
Biggest unknown: Token expiration logic and database schema details.

2. Change map

Area / file	What appears to change	Notes
`router.post`	New `/reset` endpoint	Handles token generation and DB update

3. Findings

Critical

ID	Location	Issue	Evidence	Suggested fix / verify	Confidence
C1	`db.query`	SQL Injection	`WHERE email = '${req.body.email}'`	Use parameterized queries: `WHERE email = $1`	High

High

ID	Location	Issue	Evidence	Suggested fix / verify	Confidence
H1	`UPDATE users`	No Token Expiry	Token is set without a `expires_at` timestamp	Add a timestamp column and check it during reset	High

Medium

ID	Location	Issue	Evidence	Suggested fix / verify	Confidence
M1	`res.send`	Email Enumeration	Success response sent regardless of user existence	Return a generic message for all inputs	Medium

4. Lens summary

Lens	Status	Top note
Correctness	mixed	Lacks check if user actually exists
Security	risk	Critical SQL injection vulnerability
Performance	clear	Single query operation
Reliability	risk	No error handling for `db.query` or `sendEmail`
Tests & observability	not assessed	No tests provided
Maintainability	clear	Logic is simple but unsafe

6. Merge checklist

Critical/high findings addressed (SQL Injection fix required)
Secrets not committed
New behaviour has meaningful checks
Error paths for external calls handled
Human reviewer sign-off for Auth changes

Next steps

Refactor the database query to use placeholders to prevent SQL injection.
Implement a token_expiry field in the database to prevent permanent reset links.
Wrap the database and email operations in a try/catch block for better reliability.

About this skill

Code Review Depth Pack turns a supplied diff or PR into a structured, severity-rated review: correctness, security, performance, reliability, tests, and maintainability. You get evidence-tied findings, suggested fixes, test gaps, and a merge checklist—without fake CVE scores, invented auto-fixes, or “guaranteed safe to merge” claims. Built for developers and small teams who want a sharper first-pass review than a generic chat prompt. Human verification required.

Built by Cygnix Labs · info@cygnixlabs.com · cygnixlabs.com

Frequently Asked Questions

Code Review Depth Pack — Severity + Fix Plan