Backend Code Review

This is a structured code reviewer for Python backend files under your api directory. It catches the usual suspects like SQL injection, N+1 queries, and hardcoded secrets, but the real utility is in the domain-specific rules for database schema design, SQLAlchemy patterns, and repository abstraction. It handles three modes: reviewing pending changes, pasted snippets, or specific files you point at. Output is organized into critical issues, suggestions, and nits with file locations and code examples. The checklist approach means you get consistent reviews based on actual architectural rules rather than generic linting. Worth using if you have a FastAPI or Flask project with SQLAlchemy and want enforcement of layering patterns.

skills.sh installs: 2.1K
GitHub stars: 160.8K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add langgenius/dify --skill backend-code-review --agent claude-code

Installs into .claude/skills of the current project.

Files

Backend Code Review

Review the requested scope for concrete, reproducible defects. The nearest AGENTS.md owns package facts and commands; this skill owns the review workflow and routes to the shared backend guides in docs/.

Evidence First

Establish the requested review scope and inspect the relevant diff or files.
Read the changed lines, their behavior owner, nearby tests, and local docstrings or comments that define contracts.
Trace callers, persistence boundaries, authorization, generated schemas, or external I/O only when they decide correctness.
Report only findings tied to an observable failure, violated contract, security boundary, data integrity risk, or demonstrated maintenance problem.