Peer Review Specialist
Deliver rigorous peer reviews with structured feedback and actionable insights
What You Can Do
This skill provides a comprehensive framework for conducting structured peer reviews that balance technical rigor with constructive feedback. It systematically evaluates code quality, architecture decisions, testing, security, and documentation while delivering specific, prioritized recommendations. You'll ensure consistent, professional review standards across your team and help developers grow through clear, actionable guidance.
Features
Examines functionality, code quality, design patterns, performance, security, testing, and documentation in a structured sequence
Combines technical rigor with constructive guidance, highlighting strengths before addressing areas for improvement
Categorizes issues as critical, major, minor, or style to help prioritize fixes and guide implementation urgency
Transforms observations into specific, implementable improvements with code examples and rationale when applicable
Assesses test coverage, test quality, edge case handling, and verification strategies for implementation
Identifies potential vulnerabilities, unsafe patterns, and violations of security best practices
Evaluates code comments, type hints, docstrings, function documentation, and architectural notes
Examines computational complexity, resource usage, and optimization opportunities relevant to context
Example Output
Peer Review: UserAuthenticationService
Summary
Solid implementation of JWT-based authentication with good error handling. Code is well-structured and documented. Primary opportunities: strengthen password validation, add rate limiting, and expand unit test coverage.
Strengths
✓ Clean separation of concerns — Token generation, validation, and refresh logic are properly isolated ✓ Comprehensive error handling — Specific error messages for debugging without exposing sensitive info ✓ Good inline documentation — Comments explain complex token claims and validation logic
Critical Issues (must address before merge)
- Missing rate limiting on login endpoint — Vulnerable to brute force attacks. Recommend: Redis-backed rate limiter (e.g.,
express-rate-limit)
Major Issues
- Password validation could be stronger — Currently requires 8 chars; consider NIST guidelines (min 12, no composition rules)
- Test coverage at 62% — Should reach 80%+ for security-critical code
Recommendations
- Implement exponential backoff rate limiting on
/auth/login - Upgrade password validation to follow NIST 800-63B guidelines
- Add integration tests for token refresh flow with expired tokens
- Document token claim structure in README
Testing & Coverage
- Current: 62% | Target: 80%+
- Missing: Edge cases around token expiry, concurrent refresh requests
- Good: Error path coverage, null input handling
Ready to merge? No — requires critical issues fixed first
What's Included
- Review framework template: Pre-built structure guiding you through systematic evaluation: Summary, Strengths, Issues, Recommendations, Testing, Security
- Severity classification guide: Clear definitions for critical, major, minor, and style issues with examples to calibrate your assessment
- Feedback patterns library: Pre-written constructive communication patterns for common issues (inconsistent naming, missing tests, etc.)
- Multi-layer evaluation checklist: Comprehensive checklist covering code quality, architecture, testing, security, documentation, and performance
- Example reviews: Full-length peer review examples showing proper structure, tone, and recommendation specificity across different domains
Who It's For
- Software engineers and developers
- Team leads and engineering managers
- Open source maintainers
- Senior architects and tech leads
- QA and code quality specialists
Best For
- Code reviews for feature pull requests
- Architecture and design pattern evaluation
- Security and performance audits
- Mentoring and learning-oriented feedback
- Refactoring and technical debt reviews
You might also like
You can manage the complete subcontract lifecycle—from initial negotiation through execution, compliance monitoring, and closure—with built-in risk analysis and automated documentation. The skill verifies compliance requirements, identifies contractual risks, generates required documentation, and tracks key milestones and renewal dates. All workflows are customizable to your organization's procurement policies and risk tolerance.
You submit your research consent form and receive a systematic compliance review against 45 CFR 46 and 21 CFR 56 regulations. The skill identifies specific deficiencies, maps each gap to regulatory requirements, and generates institution-specific remediation guidance with reference language you can use to bring your form into compliance.
This skill helps you manage sponsored research compliance requirements, generate required documentation, and track regulatory obligations. You can create compliance checklists, audit existing documentation against funder requirements, generate compliance reports, and maintain organized records of all sponsored program activities.
This skill helps you create standardized metadata schemas, auto-document datasets with rich descriptions, and generate structured data dictionaries that make your datasets discoverable and reusable. You can transform unorganized data into professionally documented datasets with consistent naming conventions, data lineage tracking, and compliance-ready documentation.
Coordinate systematic literature reviews using PRISMA 2020 frameworks and PICO methodology to streamline evidence synthesis. You get structured workflows for study selection, quality appraisal, and risk of bias assessment—all designed to meet academic publishing standards and accelerate your review timeline.
Provide comprehensive research guidance to library patrons by creating customized search strategies, evaluating information sources, and developing literacy materials. You can conduct consultations, design reference guides, and help patrons navigate complex research questions across any subject area.
You'll track all post-award compliance requirements, deliverables, and closeout milestones in one organized system. This skill helps you monitor regulatory deadlines, organize required documentation, prepare audit-ready records, and guide your team through the grant closeout process without missing critical compliance items.
Systematically categorize protocol deviations, evaluate their regulatory risk using evidence-based matrices, and compile comprehensive audit documentation that satisfies IRB and regulatory inspections. You'll generate detailed deviation logs with severity assessments, corrective action plans, and compliance narratives that demonstrate institutional oversight and quality assurance.