Agent skill · software engineering · anthropics
code-review
Review code changes for security, performance, and correctness. Trigger with a PR URL or diff, "review this before I merge", "is this code safe?", or when checking a change for N+1 queries, injection risks, missing edge cases, or error handling gaps.
Why this skill is useful
Adds structured guidelines for security, performance, and correctness reviews that the AI wouldn't reliably generate on its own.
What it needs
About 2k tokens when loaded. Last updated 2026-08-07. 23,345 stars on the source repository.
What this skill does
/code-review If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md. Review code changes with a structured lens on security, performance, correctness, and maintainability. Usage Review the provided code changes: @$1 If no specific file or URL is provided, ask what to review. How It Works Review Dimensions Security SQL injection, XSS, CSRF Authentication and authorization flaws Secrets or credentials in code Insecure deserialization Path traversal SSRF Performance N+1 queries Unnecessary memory allocations Algorithmic complexity (O(n²) in hot paths) Missing database indexes Unbounded queries or loops Resource leaks Correctness Edge cases (empty input, null, overflow) Race conditions and concurrency issues Error handling and propagation Off-by-one errors Type safety Maintainability Naming clarity Single responsibility Duplication Test coverage Documentation for non-obvious logic Output If Connectors Available If ~~source control is connected: Pull the PR diff automatically from the URL Check CI status and test results If ~~project tracker is connected: Link findings to related tickets Verify the PR addresses the stated requirements If ~~knowledge base is connected: Check changes against team coding standards and style guides Tips 1. Provide context — "This is a hot path" or "This handles PII" helps me focus. 2. Specify concerns — "Focus on security" narrows the review. 3. Include tests — I'll check test coverage and quality too.
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills anthropics/code-review