Agent skill · software engineering · aiskillstore
code-review
This skill should be used when the user requests a code review of changed files. Use this to review git-diffed files for security vulnerabilities (OWASP Top 10), performance issues (O(N) complexity, ORM optimization), bugs, and adherence to project coding standards defined in agents.md and claude.md.
Why this skill is useful
Adds specific security review criteria and coding standards that the AI wouldn't reliably generate on its own.
What it needs
About 5k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Code Review Skill Purpose Perform comprehensive code reviews on files that have been modified in the current git working directory. Review code for: Security vulnerabilities (OWASP Top 10) Performance issues (algorithmic complexity, ORM N+1 queries) Logic bugs and unintended behavior Adherence to project coding standards Code quality and maintainability When to Use Invoke this skill when: User explicitly requests code review User asks to review changes before committing User wants feedback on modified files User mentions checking for bugs, security issues, or performance problems Code Review Process Step 1: Identify Changed Files Use git plumbing commands to get a list of files that have been modified: Store the list of changed files for systematic review. Step 2: Read Project Standards Before reviewing code, load the project's coding standards to understand expectations: Python/Backend code: Read /Users/daviddworetzky/Documents/repos/Geist/docs/agents.md for agent architecture patterns and best practices General standards: Read /Users/daviddworetzky/Documents/repos/Geist/claude.md (or CLAUDE.md) for SQLAlchemy patterns, dependency preferences, SDLC process, and general coding preferences Key standards to check: SQLAlchemy models should follow the pattern in claude.md (proper imports, Base inheritance, relationships) Prefer minimal inline implementations over extra dependency imports Core libraries are better than PyPI packages Models must be added to scripts/copyweights.py Classes should inherit from appropriate base classes (e.g., BaseAgent) Database models should be in app/models/database/ Step 3: Review Each File Systematically For each changed file, perform the following checks: Security Review (OWASP Top 10) Check for common security vulnerabilities: 1. Injection Flaws (SQL, Command, LDAP, etc.) Look for string concatenation in SQL queries Check for unsanitized user input in shell commands Verify parameterized queries are used with SQLAlchemy 2. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/code-review--96ab8f