Mobile Code Review Pro - React Native & Native iOS/Android
Expert-level code review for mobile applications. Based on extensive experience managing large-scale mobile codebases and successful migrations.
What This Skill Does
Comprehensive mobile code review covering:
- 1. Architecture Analysis - Scalability, maintainability, patterns
- Performance Audit - Startup time, memory, battery, network
- Code Quality Review - Best practices, tech debt, refactoring opportunities
- Security Assessment - Data protection, API security, vulnerabilities
- Migration Readiness - React Native → Native evaluation
- Acquisition Prep - Code health for due diligence
Who This Is For
- - Startups preparing for acquisition
- Companies with React Native performance issues
- Teams considering React Native → Native migration
- Engineering leaders wanting code quality audit
- Companies scaling to 1M+ users
Expected Outcomes
Based on real code review experience:
- - Performance improvements: 30-50% faster app
- Crash reduction: Achieve 99.9% crash-free rate
- Code quality: Reduce tech debt by 40-60%
- Migration roadmap: Clear path if rewriting
- Acquisition-ready: Clean code for due diligence
Skill Capabilities
When you invoke this skill, it will:
✅ Analyze codebase architecture and patterns
✅ Identify performance bottlenecks
✅ Detect security vulnerabilities
✅ Evaluate React Native → Native migration viability
✅ Create prioritized improvement roadmap
✅ Estimate effort and ROI for changes
How to Use This Skill
Quick Review (1-2 days)
CODEBLOCK0
Delivers:
- - Top 10 issues
- Quick wins
- High-level recommendations
Full Audit (1-2 weeks)
CODEBLOCK1
Delivers:
- - Complete architecture analysis
- Performance profiling
- Security assessment
- Detailed roadmap
Migration Assessment (3-5 days)
CODEBLOCK2
Delivers:
- - Migration cost/benefit analysis
- Timeline estimate
- Risk assessment
- Go/no-go recommendation
Acquisition Prep (1 week)
CODEBLOCK3
Delivers:
- - Code health report
- Tech debt inventory
- Remediation plan
- Documentation for buyers
Review Categories
1. Architecture Review
What We Check:
- - Code organization and modularity
- Design patterns used
- Dependency management
- State management approach
- Network layer architecture
- Database/caching strategy
Common Issues Found:
- - God objects/classes
- Tight coupling
- Poor separation of concerns
- Inconsistent patterns
2. Performance Audit
What We Measure:
- - App startup time
- Screen rendering performance
- Memory usage patterns
- Battery consumption
- Network efficiency
- Bundle size
Tools Used:
- - Instruments (iOS)
- Android Profiler
- Flipper
- Custom profiling scripts
Benchmarks:
- - Startup: < 2 seconds
- Frame rate: 60 FPS consistent
- Memory: < 150MB typical usage
- Battery: Minimal background drain
3. Code Quality Assessment
What We Review:
- - Code style consistency
- Test coverage (% and quality)
- Documentation completeness
- Error handling patterns
- Logging practices
- Code duplication
Metrics:
- - Cyclomatic complexity
- Code coverage %
- Technical debt ratio
- Maintainability index
4. Security Review
What We Audit:
- - Data encryption (at rest, in transit)
- API key management
- Authentication/authorization
- Sensitive data handling
- Third-party library vulnerabilities
- Platform-specific security issues
Common Vulnerabilities:
- - Hardcoded secrets
- Insecure data storage
- Man-in-the-middle risks
- Insufficient input validation
5. React Native Specific
Bridge Performance:
- - JS ↔ Native communication overhead
- Serialization bottlenecks
- Native module efficiency
Bundle Analysis:
- - Bundle size optimization
- Lazy loading opportunities
- Dead code elimination
Migration Viability:
- - Feature complexity mapping
- Team capability assessment
- ROI calculation
6. Native Platform Review
iOS Specific:
- - Swift/Objective-C best practices
- Memory management (ARC)
- Auto Layout performance
- Background task handling
- App Store compliance
Android Specific:
- - Kotlin/Java patterns
- Memory leak detection
- Battery optimization
- Fragment management
- Play Store compliance
Deliverables
Code Review Report
Executive Summary (2-3 pages)
- - Overall health score (A-F)
- Top 5 critical issues
- Quick wins (can fix in 1-2 sprints)
- Strategic recommendations
Detailed Findings (10-20 pages)
- - Category-by-category analysis
- Specific code examples
- Severity ratings (Critical/High/Medium/Low)
- Remediation approaches
Roadmap (5-10 pages)
- - Prioritized action items
- Effort estimates
- Timeline recommendations
- Resource requirements
Technical Artifacts
- - Spreadsheet: All issues catalogued with metadata
- Scripts: Automated checks for ongoing monitoring
- Dashboards: Performance metrics baseline
- Documentation: Best practices guide for team
Templates Included
- 1. Code Review Checklist (
templates/code-review-checklist.md)
- Platform-specific checks
- Severity rating guide
- Best practice references
- 2. Performance Profiling Guide
- Tools setup
- Metrics to track
- Benchmark targets
- 3. Security Audit Template
- Vulnerability categories
- Testing procedures
- Remediation checklist
- 4. Migration Assessment Framework
- Cost model
- Timeline estimator
- Risk matrix
- 5. Report Template
- Executive summary format
- Finding documentation
- Roadmap structure
Requirements
- - Access to codebase (GitHub/GitLab/Bitbucket)
- Build environment access (for profiling)
- Business context (scale, goals, constraints)
- Team context (size, skills, timeline)
Advanced Features
For complex scenarios:
Performance Regression Testing:
CODEBLOCK4
Continuous Code Quality:
CODEBLOCK5
Migration Execution Support:
CODEBLOCK6
Version History
- - v1.0 (Feb 2026) - Initial release
- Full code review capabilities
- Migration assessment
- Acquisition prep
This skill is based on extensive experience managing large-scale mobile codebases, including complete rewrites and migrations, with successful outcomes for high-traffic consumer applications.
移动端代码审查专家 - React Native 与原生 iOS/Android
针对移动应用的专业级代码审查。基于管理大规模移动端代码库及成功迁移的丰富经验。
该技能的功能
全面的移动端代码审查,涵盖:
- 1. 架构分析 - 可扩展性、可维护性、设计模式
- 性能审计 - 启动时间、内存、电池、网络
- 代码质量审查 - 最佳实践、技术债务、重构机会
- 安全评估 - 数据保护、API安全、漏洞
- 迁移就绪评估 - React Native → 原生评估
- 收购准备 - 尽职调查的代码健康度
适用对象
- - 准备被收购的初创公司
- 存在React Native性能问题的企业
- 考虑从React Native迁移到原生的团队
- 希望进行代码质量审计的技术负责人
- 用户规模扩展至100万以上的公司
预期成果
基于真实的代码审查经验:
- - 性能提升: 应用速度提升30-50%
- 崩溃率降低: 实现99.9%无崩溃率
- 代码质量: 减少40-60%的技术债务
- 迁移路线图: 如需重写,提供清晰路径
- 收购就绪: 为尽职调查提供干净的代码
技能能力
调用此技能时,它将:
✅ 分析代码库架构和设计模式
✅ 识别性能瓶颈
✅ 检测安全漏洞
✅ 评估React Native → 原生迁移可行性
✅ 创建优先级改进路线图
✅ 估算变更的工作量和投资回报率
如何使用此技能
快速审查(1-2天)
对[应用名称]执行快速代码审查
交付成果:
全面审计(1-2周)
执行全面的移动端代码审计
交付成果:
迁移评估(3-5天)
评估React Native到原生迁移的可行性
交付成果:
- - 迁移成本/收益分析
- 时间线估算
- 风险评估
- 执行/不执行建议
收购准备(1周)
为收购尽职调查准备代码库
交付成果:
- - 代码健康度报告
- 技术债务清单
- 修复方案
- 面向买家的文档
审查类别
1. 架构审查
我们检查的内容:
- - 代码组织与模块化
- 使用的设计模式
- 依赖管理
- 状态管理方法
- 网络层架构
- 数据库/缓存策略
常见问题:
2. 性能审计
我们衡量的指标:
- - 应用启动时间
- 屏幕渲染性能
- 内存使用模式
- 电池消耗
- 网络效率
- 包体积
使用的工具:
- - Instruments (iOS)
- Android Profiler
- Flipper
- 自定义性能分析脚本
基准目标:
- - 启动时间:< 2秒
- 帧率:稳定60 FPS
- 内存:典型使用< 150MB
- 电池:最小后台耗电
3. 代码质量评估
我们审查的内容:
- - 代码风格一致性
- 测试覆盖率(百分比和质量)
- 文档完整性
- 错误处理模式
- 日志记录实践
- 代码重复
指标:
4. 安全审查
我们审计的内容:
- - 数据加密(静态、传输中)
- API密钥管理
- 身份验证/授权
- 敏感数据处理
- 第三方库漏洞
- 平台特定安全问题
常见漏洞:
- - 硬编码密钥
- 不安全的存储
- 中间人攻击风险
- 输入验证不足
5. React Native专项
桥接性能:
包体积分析:
迁移可行性:
6. 原生平台审查
iOS专项:
- - Swift/Objective-C最佳实践
- 内存管理(ARC)
- Auto Layout性能
- 后台任务处理
- App Store合规性
Android专项:
- - Kotlin/Java模式
- 内存泄漏检测
- 电池优化
- Fragment管理
- Play Store合规性
交付成果
代码审查报告
执行摘要(2-3页)
- - 总体健康评分(A-F)
- 前5大关键问题
- 快速见效的改进点(可在1-2个迭代中修复)
- 战略建议
详细发现(10-20页)
- - 按类别分析
- 具体代码示例
- 严重程度评级(严重/高/中/低)
- 修复方法
路线图(5-10页)
- - 按优先级排序的行动项
- 工作量估算
- 时间线建议
- 资源需求
技术产物
- - 电子表格: 所有问题及其元数据
- 脚本: 用于持续监控的自动化检查
- 仪表盘: 性能指标基线
- 文档: 团队最佳实践指南
包含的模板
- 1. 代码审查清单 (templates/code-review-checklist.md)
- 平台特定检查项
- 严重程度评级指南
- 最佳实践参考
- 2. 性能分析指南
- 工具设置
- 需追踪的指标
- 基准目标
- 3. 安全审计模板
- 漏洞类别
- 测试流程
- 修复清单
- 4. 迁移评估框架
- 成本模型
- 时间线估算器
- 风险矩阵
- 5. 报告模板
- 执行摘要格式
- 发现文档化
- 路线图结构
要求
- - 代码库访问权限(GitHub/GitLab/Bitbucket)
- 构建环境访问权限(用于性能分析)
- 业务背景(规模、目标、约束)
- 团队背景(规模、技能、时间线)
高级功能
针对复杂场景:
性能回归测试:
设置自动化性能监控
持续代码质量:
实施CI/CD代码质量门禁
迁移执行支持:
指导React Native到原生迁移的执行
版本历史
- 完整的代码审查能力
- 迁移评估
- 收购准备
此技能基于管理大规模移动端代码库的丰富经验,包括完整的重写和迁移,为高流量消费者应用取得了成功成果。