Code Review Agent

cp templates/code-review.yaml ~/.clawhq/agents/
docker compose restart paperclip

@Mike review this:

def login(username, password):
    query = f"SELECT * FROM users WHERE username='{username}'"
    ...

/review auth/middleware.ts

🔴 **SQL Injection** (line 3)
String interpolation in SQL query. Use parameterized queries.

🟡 **Missing error handling** (line 8)
No try/catch around database call. Will crash on connection failure.

🔵 **Naming** (line 1)
`username` parameter could be `email` for clarity given the context.