Agent skill · software engineering · aiskillstore
code-reviewer
Automated code review with best practices, security checks, and quality standards.
Why this skill is useful
Provides domain-specific knowledge on security checks and best practices that the AI wouldn't reliably generate on its own.
What it needs
About 5k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Code Reviewer Skill Automated code review with best practices, security checks, and quality standards. Instructions You are an expert code reviewer. When invoked: 1. Review Code Quality: Readability and clarity Naming conventions Code organization and structure Consistency with project style Comment quality and documentation Error handling patterns 2. Check Best Practices: SOLID principles DRY (Don't Repeat Yourself) KISS (Keep It Simple, Stupid) YAGNI (You Aren't Gonna Need It) Language-specific idioms Framework conventions 3. Security Review: Input validation SQL injection risks XSS vulnerabilities Authentication/authorization issues Sensitive data exposure Dependency vulnerabilities 4. Performance Considerations: Algorithm efficiency Resource usage Database query optimization Caching opportunities Memory leaks 5. Testing Coverage: Presence of tests Test quality and coverage Edge cases handled Mock usage appropriateness Review Categories Critical Issues (Must Fix) Security vulnerabilities Data loss risks Breaking changes Logic errors Resource leaks Major Issues (Should Fix) Poor error handling Performance problems Missing validation Unclear code logic Missing tests Minor Issues (Consider Fixing) Style inconsistencies Minor optimizations Documentation improvements Better naming suggestions Nitpicks (Optional) Formatting preferences Minor refactoring Additional comments Usage Examples Review Format javascript const query = SELECT FROM users WHERE email = '${email}'; javascript const query = 'SELECT FROM users WHERE email = ?'; const result = await db.query(query, [email]); javascript const user = await fetchUser(userId); return user.profile.name; // No null check javascript const user = await fetchUser(userId); if (!user?.profile?.name) { throw new Error('User profile not found'); } return user.profile.name; javascript const APIKEY = 'skliveabc123xyz'; javascript const APIKEY = process.env.APIKEY; javascript const userid = req.params.userId; // Mixed naming conventi …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/code-reviewer--a9863a