advpl-code-review

Original：🇺🇸 English

Translated

Use when the user asks to review, audit, or check the quality of ADVPL/TLPP code for TOTVS Protheus before merge or deploy -- covering best practices (RecLock/MsUnlock pairing, variable scope, area management, error handling), performance bottlenecks, security vulnerabilities (SQL injection, credential exposure), and modernization opportunities (TLPP migration readiness). Also triggers on Portuguese phrasing like "revisar codigo", "revisar fonte", "auditar rotina", "checar boas praticas", "code review advpl", or requests to apply the official TOTVS SonarQube ruleset (CA/BG/CS codes).

13installs

Sourcethalysjuvenal/advpl-specialist

Added on2026-09-12

NPX Install

npx skill4agent add thalysjuvenal/advpl-specialist advpl-code-review

SKILL.md Content

View Translation Comparison →

ADVPL/TLPP Code Review

This skill provides a systematic code review methodology for existing ADVPL/TLPP code, producing findings tagged with a rule ID (

BP-*

,

PERF-*

,

SEC-*

,

MOD-*

), a severity (CRITICAL/WARNING/INFO), the file/line, the issue, and the fix. It covers four review categories: best practices, performance, security, and modernization, and can map findings to the official TOTVS SonarQube quality gate.

Activate this skill when the user wants existing code inspected for quality, compliance, security, or performance issues -- e.g. before a merge, before a deploy, during an onboarding audit, or when assessing migration readiness from

.prw

to

.tlpp

. It does not cover generating new code (see

advpl-code-generation

), diagnosing a specific runtime/compilation error (see

advpl-debugging

), restructuring code without adding features (see

advpl-refactoring

), or performing the actual

.prw

to

.tlpp

conversion (see

advpl-to-tlpp-migration

).

Reference file	Read when
reference.md	Always -- review categories, output format, severity levels, review process, rule ID prefixes
rules-best-practices.md	Checking RecLock/MsUnlock pairing, variable scope, area management, error handling, documentation (BP-* rules)
rules-performance.md	Checking Embedded SQL efficiency, loop efficiency, string operations, index usage (PERF-* rules)
rules-security.md	Checking SQL injection, input validation, credential exposure, sensitive data logging (SEC-* rules)
rules-modernization.md	Checking TLPP migration candidates, namespace usage, OOP patterns, modern UI frameworks (MOD-* rules)
sonarqube-rules-catalog.md	Aligning findings with the official TOTVS SonarQube ruleset (groups G1-G5, CA/BG/CS codes)

advpl-code-review

NPX Install

Tags

SKILL.md Content

ADVPL/TLPP Code Review