From patchman
Review an authorized codebase for ORM misuse, N+1 query patterns, authorization-after-fetch bugs, raw SQL risks, cache key collisions, and missing tenant scopes. Use for data-access layers and security-adjacent performance pitfalls.
How this skill is triggered — by the user, by Claude, or both
Slash command
/patchman:query-reviewThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
- missing tenant scopes
Treat data-access issues as security-relevant when they change scope, leak metadata, or undermine availability controls.
npx claudepluginhub muhammedzohaib/patchman --plugin patchmanPerforms paranoid code reviews checking for bugs, security issues, race conditions, N+1 queries, trust boundaries, and pre-merge quality problems using a structured checklist.
Reviews SQL queries for performance anti-patterns, missing indexes, N+1 queries, and unsafe operations. Analyzes raw SQL, ORM queries, and migration scripts for optimization.
Statically reviews EF Core data access for correctness, performance, and isolation — DbContext lifetime, N+1 queries, SQL injection, concurrency tokens, multi-tenant filters, and migration drift.