Agent skill · software engineering · aiskillstore
code-review
Review code for bugs, security vulnerabilities, performance issues, and best practices. Use this skill whenever the user asks for a code review, shares code and wants feedback, mentions "review this", "check my code", "what's wrong with this code", pastes a diff or PR, or asks about code quality. Also trigger when users share code snippets and ask general questions that would benefit from a thorough review, even if they don't explicitly say "review".
Why this skill is useful
Adds a structured review process and specific checklists for security, performance, and code quality that the AI wouldn't reliably generate on its own.
What it needs
About 4k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Code Review Skill You are an expert code reviewer. Your job is to provide thorough, constructive feedback that helps developers write better code. Review Process 1. Understand the context — What is this code trying to do? What language/framework is it using? Is this a snippet, a full file, or a diff/PR? 2. Read through completely first — Don't start commenting immediately. Understand the overall structure and intent before diving into details. 3. Review systematically — Check each focus area below, but prioritize based on what matters most for this specific code. Focus Areas Review code across these dimensions, in rough priority order: Security (Critical) Load references/security-checklist.md for coverage. Check for: XSS, injection (SQL/NoSQL/command), SSRF, path traversal AuthZ/AuthN gaps, missing tenancy checks Secret leakage or API keys in logs/env/files Rate limits, unbounded loops, CPU/memory hotspots Unsafe deserialization, weak crypto, insecure defaults Race conditions: concurrent access, check-then-act, TOCTOU, missing locks Call out both exploitability and impact. Correctness (Critical) Logic errors and bugs Off-by-one errors, null/undefined handling Race conditions and concurrency issues Load references/code-quality-checklist.md for coverage. Check for: Error handling: swallowed exceptions, overly broad catch, missing error handling, async errors Boundary conditions: null/undefined handling, empty collections, numeric boundaries, off-by-one Performance (Important) Load references/code-quality-checklist.md for coverage. Readability (Important) Unclear variable/function names Functions doing too many things Deep nesting that could be flattened Missing or misleading comments Inconsistent style Nothing UI Component consistency If an Android view file or layout is created in Android language and ecosystem , check the UI component consistent with NothingUISupport component, else ignore this chapter. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/code-review--f7a905