code-critic

Analyze code for security vulnerabilities, performance concerns, and typing issues.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/plutowang/term.conf --skill code-critic-plutowang
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-critic
Source: https://github.com/plutowang/term.conf/tree/main/opencode/skills/global/code-critic
Command: npx skills add https://github.com/plutowang/term.conf --skill code-critic-plutowang

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams identify and fix security vulnerabilities, performance inefficiencies, and typing issues during code reviews, reducing risk and improving quality.

Core Features & Use Cases

  • Security review: checks for injections, unsafe inputs, exposed secrets.
  • Performance analysis: flags expensive patterns, Big-O concerns, and inefficient loops.
  • Typing discipline: enforces strict typing and correct type usage across languages.

Quick Start

Provide a code snippet after the prompt and ask for an assessment.

Frequently Asked Questions about code-critic

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find security vulnerabilities and performance issues during a code review?

To find security vulnerabilities and performance issues during a code review, you can analyze code blocks to identify injections, unsafe inputs, and expensive algorithmic patterns. This process flags typing issues and security concerns across languages like JavaScript, Python, and Rust.

What is the best way to enforce strict typing in Python and JavaScript pull requests?

The best way to enforce strict typing in pull requests is through static code analysis that evaluates type correctness across languages. This analysis flags typing issues and type misuse directly within code blocks provided during the review process.

How do I triage code review findings into Critical, Warning, and Nitpick labels?

To triage code review findings into Critical, Warning, and Nitpick labels, analyze the code to categorize security vulnerabilities, performance concerns, and typing issues by severity. This labeling satisfies triage requirements for prioritizing module and library fixes.

Does static code analysis work with Rust and TypeScript for Big-O performance concerns?

Static code analysis works with Rust and TypeScript to identify Big-O performance concerns and inefficient loops. It evaluates code blocks fed into the prompt to flag expensive patterns and ensure type correctness across these languages.

Can I get refactor suggestions for unsafe inputs and exposed secrets in my code?

You can get optional refactor suggestions for unsafe inputs and exposed secrets by analyzing your code blocks. The analysis identifies these security vulnerabilities and provides triage labeling to help you apply the suggested fixes.