Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Backend Code Review · langgenius | DecimalAI

code reviewby langgenius

Backend Code Review

langgenius/backend-code-review

Source langgenius/dify ↗License NOASSERTION

Use only when the user explicitly requests a review or audit of backend code under `api/`. Supports pending-change, file-focused, and pasted-diff reviews.

SkillScore88Maintained

Automatic

Coding pack

Last verified 9/27/2026

What it changes

Passed 21 of 24 test cases with the skill, and 13 of 24 without it.

Without skill54%

With skill88%

Checks it passed that the model alone missed

Includes the exact phrase "No issues found."
Classifies the N+1 query loop performance issue as P2 severity.
References references/db-schema-rule.md for schema and migration reviews.

and 6 more in the full report

9 fixed14 passed either way3 still failing0 broke

Pass-rate lift: +35 pp
Tokens: -9%
Agent turns: 0%
Response time: -31%

Model gemini-3.6-flashMeasured 9/27/2026v123 of 26 cases passed with skill · 24 comparable

Tokens, turns and time describe resource use, not a dollar price.

Use this skill

Save it into your project's skills folder. Claude Code picks it up in its next session.

curl -fsSL --create-dirs -o .claude/skills/langgenius-backend-code-review/SKILL.md https://app.decimal.ai/s/langgenius-backend-code-review/SKILL.md

Want it pinned and updatable? pip install "decimalai>=0.15", then decimalai skills add langgenius-backend-code-review, and start Claude Code with claude --plugin-dir "$(git rev-parse --show-toplevel)/.agents"

1 · One-time — install the CLI (docs ↗)

pip install "decimalai>=0.15"

2 · Get the skill — writes .agents/skills/langgenius-backend-code-review/ and pins it in .decimal/skills.lock

decimalai skills add langgenius-backend-code-review

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/langgenius-backend-code-review/SKILL.md https://app.decimal.ai/s/langgenius-backend-code-review/SKILL.md

Raw file: /s/langgenius-backend-code-review/SKILL.md ↗ · machine-readable summary at /s/langgenius-backend-code-review.json ↗

Safety checks: 3 of 3 passed

Code scan CleanIntent PassedContent Clean

See it in action

One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.

1 of 9

Prompt

I've submitted a pull request that updates our core domain models and repository access layers. Can you do a thorough review of the modified backend files for bugs, security vulnerabilities, or performance defects? Format the report with severity-ranked findings detailing exact locations, how the bug manifests, its impact, and recommended fixes. If no defects are present, give a brief clear statement indicating no problems were identified.

What was checked, without and with the skill
Checked	Without skill	With skill
Includes the exact phrase "No issues found."	Missed	Passed
Omits speculative risk lists when code diffs are absent.	Passed	Passed
Omits unsolicited offers to perform future code reviews.	Passed	Passed

case-07 · gemini-3.6-flash · 9/27/2026 · answers are capped and redacted

What's inside

The instructions your model reads when the skill loads.

SKILL.md35 lines5 files

Backend Code Review

Review the requested scope for concrete, reproducible defects. The nearest AGENTS.md owns package facts and commands; this skill owns the review workflow and routes to its bundled rule packs.

Evidence First

Establish the requested review scope and inspect the relevant diff or files.
Read the changed lines, their behavior owner, nearby tests, and local docstrings or comments that define contracts.
Trace callers, persistence boundaries, authorization, generated schemas, or external I/O only when they decide correctness.
Report only findings tied to an observable failure, violated contract, security boundary, data integrity risk, or demonstrated maintenance problem.

Rule Routing

Read only the packs matched by the diff:

Models or migrations: references/db-schema-rule.md
Controller, service, core/domain, library, or model dependency direction: references/architecture-rule.md
Table access outside an established repository boundary: references/repositories-rule.md
SQLAlchemy sessions, queries, transactions, CRUD, concurrency, or raw SQL: references/sqlalchemy-rule.md

When no pack applies, review correctness, security, behavior changes, and test evidence directly. Check current official documentation only when local code and contracts do not settle framework or library behavior.

Severity And Output

P0: security or privacy exposure, data loss, or a production-wide outage.
P1: user-visible regression, broken authorization or tenant isolation, invalid public contract, or failed primary workflow.
P2: concrete correctness, performance, maintainability, or test defect likely to cause incorrect behavior.
P3: minor actionable cleanup; omit unless the user requested a thorough audit.

Lead with findings ordered by severity. Include a tight file and line reference, the failing contract or reproduction path, impact, and a concrete fix direction. If there are no findings, say No issues found. and state any material verification gap. Do not add praise sections, speculative risks, or an unsolicited offer to implement fixes.

Track record

Benchmark

21 / 24

test cases passed, vs 13 / 24 without

Adoption

Users: 0
Times used: 0

Safety and source details

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v5 — 8/31/2026

View 15 scanner checks

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

langgenius / dify

.agents/skills/backend-code-review/SKILL.md

View on GitHub ↗

License NOASSERTIONImported 8/31/2026Version v1Bundled 4 files

More skills from the same source and nearby in the registry, with their headline benchmark lift.

Ready to supercharge your AI agents?

See it in action

What's inside

Backend Code Review

Evidence First

Rule Routing

Severity And Output

Track record

Benchmark

Adoption

SkillSafety

Source

Related skills