cloudbase-code-review

1## Sibling skills (local only)
2 
3Sibling CloudBase skills ship beside this skill. Use local relative paths such as `../auth-tool-cloudbase/SKILL.md`.
4 
5If a referenced sibling skill file is missing from this environment, ask the user to install the full CloudBase plugin (or the missing skill). Do **not** HTTP-fetch remote skill or protocol markdown into the agent context.
6 
7# CloudBase Code Review
8 
9> **One-liner**: After implementing CloudBase features, call this skill to catch common mistakes before users do.
10 
11## When to use
12 
13Call this skill **after** completing a CloudBase implementation task, before declaring done:
14 
15- You implemented auth (login / register / route guard)
16- You created database tables or wrote CRUD (NoSQL / PostgreSQL / MySQL)
17- You set up CloudBase Storage (file upload, hosting)
18- You configured security rules or RLS policies
19- You wrote MCP-dependent code
20- You wrote Cloud Function or CloudRun HTTP handlers (check for credential / header echo leaks)
21 
22## How it works
23 
24The skill runs in two layers:
25 
26| Layer | Method | Speed | What it catches |
27|-------|--------|-------|-----------------|
28| **Lint (optional)** | No executable script is shipped. If the user approves running lint, review the code block in `references/lint-rules/README.md`, copy it to a temporary local `cloudbase-lint.mjs`, then run `node cloudbase-lint.mjs --project-dir <path>` | Seconds | Deterministic regex checks — wrong API calls, missing configs, pattern mismatches |
29…