Agent skill · software engineering · aiskillstore
code-reviewer
Automated code review with security scanning, quality metrics, and best practices analysis. Use when reviewing code for: (1) Security vulnerabilities and common attack vectors, (2) Code quality issues and maintainability concerns, (3) Performance bottlenecks and optimization opportunities, (4) Best practices and design patterns, (5) Test coverage and testing strategies, (6) Documentation quality and completeness
Why this skill is useful
Adds executable scripts for automated security scanning and code quality analysis that enhance the AI's review capabilities.
What it needs
Requires bandit, eslint, gosec, npm, pip-audit, safety, yarn installed locally. About 7k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Code Reviewer Comprehensive automated code review skill that systematically analyzes code for security issues, quality metrics, performance problems, and adherence to best practices. Purpose This skill provides structured code review workflows that combine automated analysis tools with expert guidance to identify issues across security, quality, performance, and maintainability dimensions. When to Use This Skill Use this skill when: Reviewing pull requests or code submissions Conducting security audits of existing codebases Evaluating code quality before deployment Identifying technical debt and refactoring opportunities Establishing code review standards for teams Learning what to look for in code reviews Core Review Workflow Phase 1: Initial Analysis 1.1 Understand the Context Read the PR description or change summary Identify the type of change (feature, bug fix, refactor, security patch) Determine the scope and affected components Note any related issues or tickets 1.2 Code Overview Review file changes and additions/deletions Identify changed modules and their relationships Look for unexpected changes or scope creep Check for breaking changes Phase 2: Security Review 2.1 Common Vulnerability Patterns Check for these critical security issues: Input Validation Unvalidated user input reaching sensitive operations SQL injection vulnerabilities Command injection possibilities Path traversal attacks XML/XXE injection points Authentication & Authorization Missing authentication checks Broken access control Insecure password storage Weak session management Missing CSRF protection Data Exposure Hardcoded credentials or API keys Sensitive data in logs Inadequate encryption Information disclosure in error messages Exposed configuration files Code Injection Unsafe deserialization Template injection Code evaluation from user input Unsafe reflection usage 2.2 Automated Security Scanning Use security analysis tools: Python: JavaScript/Node.js: Go: See references/securitypatter …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/code-reviewer--d90be8