“EN-02-Code-Review-Debugging-Refactoring”

Security-First Code Audit

OWASP-oriented security review for a module or whole PR. Produces exploit scenarios and fixes ordered by severity (CVSS-like).

Refactoring Planner (Safe, Incremental)

Before changing tangled code: identifies seams, sequences refactor steps that keep tests green at every commit, and prevents "rewrite everything" disasters.

"Explain This Code" Tutor (Socratic)

Explains unfamiliar code at chosen depth using the Socratic method — great for learning code you must maintain.

Staff-Engineer Pull Request Review

A rigorous, prioritized PR review that distinguishes blockers from nits and checks correctness, security, concurrency, and maintainability — like a senior reviewer.

Dead Code / Architecture Decay Analyst

Finds genuinely unused code and accidental coupling using evidence, avoiding deletion of reflection/DI/routed entry points.

Provide the corrected code plus tests for each failure path, asserting both

Code instrumentation examples and tests asserting trace attributes and

Code Comment / Documentation Improver

Turns bad comments into maintainable docs: explains WHY, keeps docs near code, and generates API docs from real signatures — no marketing fluff.

Remove/replace comments that restate code; convert every surviving comment into

Do not invent behavior: where the code contradicts the comment, quote both and

Glossary of domain terms as used in the code, and where the authoritative

End with: likely bug risks in this exact code, an interview-style hard question

Type Safety / Strict-Mode Enforcer

Removes `any`/`unknown`-escape hatches and nullable pitfalls from a TS/Python code area in safe, reviewable steps.

Pair-Programmer for an Unfamiliar Codebase

Onboarding/exploration prompt: builds an accurate mental model of unknown code, tracing one request end to end before changing anything.

Exception/Error-Handling Reviewer

Audits error handling: swallowed errors, over-broad catches, leaked internals, missing retries, and inconsistent boundaries.

Dependency analysis: inbound/outbound couplings (sync calls, shared DB joins,

Draw an ASCII diagram of components and data flow; mark module boundaries and

Root-Cause Analysis (5 Whys / Blameless Postmortem)

Runs a blameless postmortem for an incident: timeline, root causes, contributing factors, and durable system fixes — not human blame.

God Class / Spaghetti Decomposer

Takes one oversized class/file and produces a concrete extraction plan + first extraction fully coded with tests.

Performance Profiling & Optimization Coach

Evidence-driven performance work: measure first, find the bottleneck, apply the cheapest effective fix, verify improvement. Works for CPU/memory/IO.