Review an authorized codebase for ORM misuse, N+1 query patterns, authorization-after-fetch bugs, raw SQL risks, cache key collisions, and missing tenant scopes. Use for data-access layers and security-adjacent performance pitfalls.
Scanned 9/7/2026
Install to Claude Code
Skills Directorynpx -y skills add MuhammedZohaib/patchman --skill query-review --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Query Review?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/muhammedzohaib-query-review-patchman)More formats (shields.io, HTML) on the badges page.
---
name: query-review
description: Review an authorized codebase for ORM misuse, N+1 query patterns, authorization-after-fetch bugs, raw SQL risks, cache key collisions, and missing tenant scopes. Use for data-access layers and security-adjacent performance pitfalls.
---
# Query Review
## Focus
- missing tenant scopes
- authorization after broad fetches
- raw SQL without parameter binding
- N+1 patterns that become availability or side-channel issues
- eager loads that overexpose sensitive associations
- cache keys missing tenant or role context
## Heuristic
Treat data-access issues as security-relevant when they change scope, leak metadata, or undermine availability controls.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
