code-reviewer
Analyzes code diffs and files to identify bugs, security vulnerabilities
by jeffallanFree
Description
code-reviewer is an agent skill from the jeffallan claude-skills collection that guides a coding agent through a thorough code review of diffs or files. It looks for bugs, security vulnerabilities such as SQL injection, cross-site scripting and insecure deserialisation, code smells, N+1 queries, and naming problems. The review follows five steps. First the agent reads the pull request description and summarises the intent in one sentence, asking the author to clarify if it cannot. Then it reviews the architecture and design, asking whether the change follows existing patterns and whether any new abstractions are justified. The details step checks code quality, security and performance, looking for N+1 queries, hardcoded secrets and injection risks. The tests step checks coverage and asks whether the tests assert behaviour rather than implementation. The feedback step produces a categorised report using an output template, and flags critical issues as soon as they are found. The skill is useful for reviewing pull requests and running quality or security audits on a codebase. It is listed on skills.sh, where the page shows install counts and GitHub stars for the collection. Its Gen Agent Trust Hub audit is marked as failing, and Snyk shows a warning, which the FAQ lists. Install it with npx skills add https://github.com/jeffallan/claude-skills --skill code-reviewer.…
Highlights
- Bugs and security vulnerabilities
- SQL injection and XSS checks
- N+1 query detection
- Architecture and pattern review
- Categorised feedback report
- Installs from skills.sh
Ratings & Reviews
No ratings yet
Be the first to rate code-reviewer.
People also visit
code-reviewer FAQ
What does this skill review?
Diffs and files for bugs, security issues such as SQL injection and XSS, code smells, N+1 queries and naming.
What is the first step?
Reading the pull request description and summarising its intent in one sentence. If the agent cannot, it asks the author to clarify.
How is the feedback given?
As a categorised report using an output template, with critical issues flagged as soon as they are found.
How do I install it?
Run npx skills add https://github.com/jeffallan/claude-skills --skill code-reviewer.
What are the security audit results?
skills.sh lists three audits: Gen Agent Trust Hub Fail, Socket Pass and Snyk Warn. A Warn or Fail is worth reading before you install.
How popular is it?
The page shows about 6.3K installs, and the claude-skills repository has 11.9K GitHub stars.
What are the best code-reviewer alternatives?
Popular alternatives to code-reviewer include ponytail-review, code-review-checklist and code-review-excellence. See all code-reviewer alternatives