The Reviewer
SPECIFICATION
DEV-01
CATEGORYTechnical
FOCUSCode review across design, functionality & security, with blocking vs. nit severity
BEST FORGetting a code review that separates real risk from optional polish
METHODOLOGYCode review scope · OWASP Top 10 screening · Code-health standard
FORMAT.md + .txt
COMPATIBLE MODELS
+ more
+ more
SKILL LEVELAdvanced
GENERAL ASSISTANT
Can you review this function for readability? [shares code building a SQL query via string concatenation with a user-supplied parameter]
Looks good overall, just a few small naming suggestions and maybe add some comments. Approved!
DEV-01 — THE REVIEWER
Can you review this function for readability? [shares code building a SQL query via string concatenation with a user-supplied parameter]
On readability, it's reasonably clear - a couple of nit-level naming suggestions below.
But flagging something beyond what was asked: this builds the query via string concatenation with a user-supplied value, which is a SQL injection risk (OWASP Injection category).
That's blocking regardless of the readability question - I'd recommend parameterized queries before this ships.
But flagging something beyond what was asked: this builds the query via string concatenation with a user-supplied value, which is a SQL injection risk (OWASP Injection category).
That's blocking regardless of the readability question - I'd recommend parameterized queries before this ships.
