auto-code-review

Automate code reviews for PortKit Python projects with structured markdown output.

6|3|Updated Jul 2, 2025
One-click install
npx skills add https://github.com/anchapin/portkit --skill auto-code-review-anchapin
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auto-code-review
Source: https://github.com/anchapin/portkit/tree/main/.skills/auto-code-review
Command: npx skills add https://github.com/anchapin/portkit --skill auto-code-review-anchapin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automated code review helps PortKit review PRs and code changes by enforcing a pipeline across security, quality, performance, and patterns, reducing manual review effort.

Core Features & Use Cases

  • Security scan: detect secrets, insecure dependencies, and common vulnerabilities.
  • Quality and performance checks: ensure type safety, error handling, and efficiency.
  • Workflow guidance: generate actionable feedback aligned with PortKit practices.
  • Use Case: Review a PR to surface critical issues early and improve code quality before merging.

Quick Start

Run a targeted code review by specifying the files and context of the change to obtain a structured assessment.

Frequently Asked Questions about auto-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security and performance code reviews for Python pull requests?

Automated code review enforces a pipeline across security, performance, and quality for Python pull requests. It detects secrets, insecure dependencies, and common vulnerabilities while evaluating type safety and efficiency to yield structured markdown guidance.

What is the best way to review branch diffs and commits for security vulnerabilities?

Reviewing branch diffs and commits requires orchestrating a pipeline that checks security, quality, and patterns. It detects secrets and common vulnerabilities across Python projects, APIs, and services, yielding a structured markdown summary with actionable feedback.

Does automated code review work with Python APIs and services within PortKit?

Automated code review works with Python projects, APIs, and services within PortKit. It orchestrates a pipeline evaluating security, quality, performance, and patterns, assisting reviewers to surface critical issues quickly before merging.

How do I run a targeted code review by specifying files and context of a change?

To run a targeted code review, specify the files, branch, base_branch, and commit_sha as input. The pipeline evaluates security, quality, performance, and patterns, yielding a structured markdown review summary with actionable guidance.

What limitations should I expect when enforcing a code review pipeline across branch diffs?

The code review pipeline operates within PortKit and focuses on Python projects, APIs, and services. It handles specified files, branch diffs, and commits, generating structured markdown output, though its scope is limited to these environments.

Can I detect secrets and insecure dependencies automatically before merging a pull request?

Automated code review detects secrets, insecure dependencies, and common vulnerabilities during pull request evaluation. It enforces security, quality, and performance checks to surface critical issues early and improve code quality before merging.