Agent skill · software engineering · onewave-ai
code-review-pro
Comprehensive code review covering security vulnerabilities, performance bottlenecks, best practices, and refactoring opportunities. Use when user requests code review, security audit, or performance analysis.
Why this skill is useful
Provides detailed security and performance analysis patterns that the AI wouldn't reliably generate on its own.
What it needs
About 3k tokens when loaded. Last updated 2026-07-15. 242 stars on the source repository.
What this skill does
Code Review Pro Deep code analysis covering security, performance, maintainability, and best practices. When to Use This Skill Activate when the user: Asks for a code review Wants security vulnerability scanning Needs performance analysis Asks to "review this code" or "audit this code" Mentions finding bugs or improvements Wants refactoring suggestions Requests best practice validation Instructions 1. Security Analysis (Critical Priority) SQL injection vulnerabilities XSS (cross-site scripting) risks Authentication/authorization issues Secrets or credentials in code Unsafe deserialization Path traversal vulnerabilities CSRF protection Input validation gaps Insecure cryptography Dependency vulnerabilities 2. Performance Analysis N+1 query problems Inefficient algorithms (check Big O complexity) Memory leaks Unnecessary re-renders (React/Vue) Missing indexes (database queries) Blocking operations Resource cleanup (file handles, connections) Caching opportunities Excessive network calls Large bundle sizes 3. Code Quality & Maintainability Code duplication (DRY violations) Function/method length (should be <50 lines) Cyclomatic complexity Unclear naming Missing error handling Inconsistent style Missing documentation Hard-coded values that should be constants God classes/functions Tight coupling 4. Best Practices Language-specific idioms Framework conventions SOLID principles Design patterns usage Testing approach Logging and monitoring Accessibility (for UI code) Type safety Null/undefined handling 5. Bugs and Edge Cases Logic errors Off-by-one errors Race conditions Null pointer exceptions Unhandled edge cases Timezone issues Encoding problems Floating point precision 6. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills onewave-ai/code-review-pro