Code Review Prompts: Beyond "Looks Good to Me"
13 copy-ready AI code review prompts that surface real bugs, security holes, perf issues, and test gaps — plus which 2026 review bots to pair them with.
👨💻 Coding & Developer Prompts
Code review, bug audit, SEO audit, Claude Code, Codex, refactor, tests, README, security audit.
36 articles
Coding prompts are not "write me this app" — good ones execute one concrete action in a known context: review a diff, write a test set, generate a README. This hub covers 12 dev scenarios: code review, bug audit, SEO audit, Claude Code execution, Codex review, refactor, test generation, READMEs, migration planning, architecture review, security audit, and deployment checks. Built for developers using Claude Code, Codex, Cursor, or similar AI coding tools.
🚀 Start here
New to this hub? Read these three first:
Full Repository Audit Prompts: 15 Templates for Whole-Project Review
Whole-repo audit prompts for Claude Code, Codex, and Cursor — architecture smells, dead code, security risks, dependency drift, and test gaps in one structured pass.
Claude Code Execution Prompts: Plan, Build, Verify
12 copy-ready prompts to brief Claude Code (or Codex) on real engineering work — scoped features, surgical bug fixes, migrations, refactors, TDD, perf, CI debugging — mapped to Plan Mode and /rewind.
🔥 Popular articles
Accessibility Regression Audit Prompts: 12 Templates Beyond axe-core
axe-core catches ~57% of WCAG issues. 12 copy-ready prompts for keyboard order, focus management, screen-reader copy, WCAG 2.2 target size, and motion preferences.
Bug Reproduction Prompts: 12 Templates for Minimal Repro Cases
Go from "it broke" to a minimal, deterministic repro in one prompt. 12 copy-ready templates for shrinking inputs, isolating env, and writing a failing test that lasts.
Build Failure Investigation Prompts: 12 Templates for Red CI
Stop guessing at red CI. 12 prompt templates that narrow build and test failures by environment, cache, dependency, flake, and order of operations.
Changelog Generation Prompts: 12 Templates for Useful Release Notes
Stop dumping git log into release notes. 12 prompt templates to turn commits / PRs into a user-facing changelog that's honest, brief, and useful. Updated June 2026.
CI/CD Pipeline Audit Prompts for Fast, Trustworthy Builds
When CI is slow, flaky, or lies green, audit it. 12 copy-ready prompts for GitHub Actions / GitLab CI / CircleCI on caching, parallelism, secrets, and gates — with 2026 runner costs.
Codebase Convention Detection Prompts: 12 Templates to Read a New Repo
Inherited a 200-file codebase? 12 prompt templates to infer naming, layering, error-handling, and dependency conventions before you write a single new line.
🆕 Latest articles
Accessibility Regression Audit Prompts: 12 Templates Beyond axe-core
axe-core catches ~57% of WCAG issues. 12 copy-ready prompts for keyboard order, focus management, screen-reader copy, WCAG 2.2 target size, and motion preferences.
Bug Reproduction Prompts: 12 Templates for Minimal Repro Cases
Go from "it broke" to a minimal, deterministic repro in one prompt. 12 copy-ready templates for shrinking inputs, isolating env, and writing a failing test that lasts.
Build Failure Investigation Prompts: 12 Templates for Red CI
Stop guessing at red CI. 12 prompt templates that narrow build and test failures by environment, cache, dependency, flake, and order of operations.
Changelog Generation Prompts: 12 Templates for Useful Release Notes
Stop dumping git log into release notes. 12 prompt templates to turn commits / PRs into a user-facing changelog that's honest, brief, and useful. Updated June 2026.
CI/CD Pipeline Audit Prompts for Fast, Trustworthy Builds
When CI is slow, flaky, or lies green, audit it. 12 copy-ready prompts for GitHub Actions / GitLab CI / CircleCI on caching, parallelism, secrets, and gates — with 2026 runner costs.
Codebase Convention Detection Prompts: 12 Templates to Read a New Repo
Inherited a 200-file codebase? 12 prompt templates to infer naming, layering, error-handling, and dependency conventions before you write a single new line.
All articles in this hub
Accessibility Regression Audit Prompts: 12 Templates Beyond axe-core
axe-core catches ~57% of WCAG issues. 12 copy-ready prompts for keyboard order, focus management, screen-reader copy, WCAG 2.2 target size, and motion preferences.
Bug Reproduction Prompts: 12 Templates for Minimal Repro Cases
Go from "it broke" to a minimal, deterministic repro in one prompt. 12 copy-ready templates for shrinking inputs, isolating env, and writing a failing test that lasts.
Build Failure Investigation Prompts: 12 Templates for Red CI
Stop guessing at red CI. 12 prompt templates that narrow build and test failures by environment, cache, dependency, flake, and order of operations.
Changelog Generation Prompts: 12 Templates for Useful Release Notes
Stop dumping git log into release notes. 12 prompt templates to turn commits / PRs into a user-facing changelog that's honest, brief, and useful. Updated June 2026.
CI/CD Pipeline Audit Prompts for Fast, Trustworthy Builds
When CI is slow, flaky, or lies green, audit it. 12 copy-ready prompts for GitHub Actions / GitLab CI / CircleCI on caching, parallelism, secrets, and gates — with 2026 runner costs.
Codebase Convention Detection Prompts: 12 Templates to Read a New Repo
Inherited a 200-file codebase? 12 prompt templates to infer naming, layering, error-handling, and dependency conventions before you write a single new line.
Database Migration Review Prompts for Safe Schema Changes
12 migration review prompts that catch table-locking ALTERs, backfill races, and silent column drops across Postgres, MySQL, and SQLite. Tested against Opus 4.7 and GPT-5.5.
E2E Test Plan Prompts: 13 Templates for Playwright / Cypress
Turn a flaky, screenshot-heavy e2e suite into a small, fast, deterministic plan. 13 copy-ready prompts for journeys, selectors, auth fixtures, flake triage, and PR coverage, tuned for Playwright 1.59 (2026).
Feature Rollout Risk Review Prompts: 12 Templates for Safe Launches
Before you flip the flag, run a rollout risk review. 12 prompts for phased rollout plans, guardrail metrics, abort criteria, and customer comms — tuned for 2026 tooling.
Migration Plan Prompts: 12 Templates for Framework / DB / Auth Moves
12 migration prompts that produce a real phased plan with rollback at every step, not "rewrite everything". Covers Next.js App Router, Postgres, auth swaps, monolith→service, monorepo.
Multi-Agent Handoff Prompts for Claude Code Subagents
12 prompt templates to hand work between Claude Code subagents — research, plan, implement, review, ship — without losing context. Updated for June 2026.
Performance Regression Audit Prompts: 12 Templates for p99 Triage
When p99 spikes, you need triage not vibes. 12 prompt templates for diffing perf signals, hunting N+1s, JS bundle bloat, render storms, and DB plan changes — current for June 2026.
PR Review Prompts: 14 Templates for AI-Assisted Code Review
14 copy-ready AI PR review prompts that find real issues — diff-scoped, blast-radius aware, severity-ranked. Plus the 2026 tool landscape (Copilot, Claude Code, CodeRabbit, Bugbot).
Release Checklist Prompts: 13 Templates for Safe Production Deploys
Release-day prompts that build a real go/no-go checklist, not a generic 'check the build'. 13 templates for staging, canary, rollback, and observability.
Technical Debt Prioritization Prompts: 12 Templates Beyond a Backlog
12 prompt templates to rank tech debt by impact × effort × decay risk — mapped to WSJF, with model picks for June 2026.
Unit Test Generation Prompts: 14 Templates That Catch Real Bugs
Stop asking AI to 'write tests for this.' 14 copy-ready unit-test prompts for boundaries, error paths, mocks vs fakes, parameterized suites, and regression locks — tuned for Vitest 4, Jest 30, pytest 9.
Architecture Review Prompts for Layer and Dependency Audits
15 architecture review prompts that surface real layering bugs, dependency cycles, and boundary leaks — with file:line evidence, not generic "consider DDD" advice.
Firebase Config Audit Prompts for Rules and Functions
15 copy-ready prompts to audit Firebase Security Rules, indexes, Cloud Functions, Auth, and App Check — updated for 2nd-gen functions (June 2026).
Full Repository Audit Prompts: 15 Templates for Whole-Project Review
Whole-repo audit prompts for Claude Code, Codex, and Cursor — architecture smells, dead code, security risks, dependency drift, and test gaps in one structured pass.
Next.js App Router Review Prompts (16 + Cache Components)
15 copy-ready Next.js App Router code review prompts for Next.js 16 — server/client boundaries, server actions, use cache, cacheTag, proxy.ts, streaming. Updated June 2026.
Supabase RLS Policy Review Prompts for Auth and Roles
15 Supabase Row-Level Security review prompts: auth.uid() checks, WITH CHECK coverage, service_role bypass, storage bucket RLS, SECURITY DEFINER, and the (select auth.uid()) perf fix.
Accessibility Audit Prompts: 12 WCAG 2.2 Frontend Review Templates
12 copy-ready prompts that walk a page as a keyboard-only and screen-reader user — semantics, focus, ARIA widgets, contrast, modal stacks, live regions — each finding mapped to a WCAG 2.2 criterion.
API Contract Review Prompts for REST and GraphQL
15 prompts that pressure-test REST and GraphQL contracts before they ship: naming, status codes, RFC 9457 errors, breaking changes, pagination, N+1, field-level auth.
Bug Audit Prompts: Hunt Hidden Bugs Before Prod
13 copy-ready prompts that hunt specific bug families — race, null, off-by-one, leaks — before they ship. Tuned for Claude Opus 4.7, Cursor, and Codex (June 2026).
Claude Code Execution Prompts: Plan, Build, Verify
12 copy-ready prompts to brief Claude Code (or Codex) on real engineering work — scoped features, surgical bug fixes, migrations, refactors, TDD, perf, CI debugging — mapped to Plan Mode and /rewind.
Code Review Prompts: Beyond "Looks Good to Me"
13 copy-ready AI code review prompts that surface real bugs, security holes, perf issues, and test gaps — plus which 2026 review bots to pair them with.
Database Schema Review Prompts for Safe Migrations
12 copy-ready prompts that walk a schema like a future migrator: normalization, indexes, FK cascades, nullability, soft-delete, JSON columns, lock-safe migrations, ORM diff. Updated June 2026.
Deployment Check Prompts: Pre-Launch and Post-Deploy Checklists
12 copy-ready prompts to pre-flight a deploy: env-var diff, DNS cutover, cache invalidation, smoke test, rollback drill, 24h watch, security headers, incident comms.
Performance Optimization Prompts: 14 Templates for Real Speed Wins
14 measure-first performance prompts for AI coding tools: LCP / INP / CLS / N+1 / TTFB / bundle / cache fixes, before-after Web Vitals diffs, and a premature-optimization detector. Current Core Web Vitals thresholds (June 2026) included.
React Component Refactor Prompts (React 19 + Compiler Era)
13 copy-ready prompts to refactor React components in 2026: extract hooks, lift state, split server/client, audit memo in the React Compiler era, and kill prop-drilling.
README Generation Prompts: Get Readers to Hello World
12 copy-paste prompts for READMEs that move a new reader from git clone to a working install fast: skeleton, quickstart, install troubleshooting, examples, API table, and audit.
Refactor Prompts: 18 Templates for Safer AI Refactors
18 copy-ready prompts to plan, execute, and verify AI refactors without breaking behavior — for Claude Code, Cursor, and Codex. Module extraction, renames, async migrations, god-function splits.
Security Audit Prompts: AppSec for Indie Devs (2026)
12 AI prompts to audit your code against the OWASP Top 10:2025 — access control, auth, secrets, supply chain, file uploads, CORS, PII logging — and ship a finding-plus-fix list without hiring a pentester.
SEO Audit Prompts for Content Sites
12 copy-ready prompts to AI-audit a content site — metadata, internal links, hreflang, thin pages, canonical, schema, cannibalization, Core Web Vitals — with exact thresholds and a fix per finding.
Test Generation Prompts (Integration / E2E / Snapshot): 13 Templates
13 prompts for integration, E2E, snapshot, and contract tests with Vitest 3, pytest 9, and Playwright. Tests that catch real bugs, not coverage noise (June 2026).
14 TypeScript Error Diagnosis Prompts for Cryptic TS Errors
14 copy-paste prompts to diagnose TypeScript errors fast: generics, conditional types, narrowing, module resolution, and .d.ts files. Updated for TS 6.0/7.0, June 2026.