code-quality-review

Reviews code against correctness, architecture, standards, robustness, and maintainability checklists with severity-triaged findings.

Updated Sep 14, 2026
One-click install
npx skills add https://github.com/Royrahav/my_claude_components --skill code-quality-review-royrahav
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-quality-review
Source: https://github.com/Royrahav/my_claude_components/tree/main/skills/code-quality-review
Command: npx skills add https://github.com/Royrahav/my_claude_components --skill code-quality-review-royrahav

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Code reviews often produce vague, generic feedback like "improve error handling" that authors cannot act on. This Skill performs a rigorous, falsifiable review of code against five engineering categories and produces specific, evidence-backed findings with file:line citations, concrete triggering scenarios, and severity triage — the kind of review a senior engineer would actually write. ## Core Features & Use Cases - Five-category checklist review: Systematically checks correctness (off-by-one, race conditions, resource leaks), design & architecture (layering, coupling, abstraction fit), coding standards, robustness (boundary validation, injection, timeouts under locks), and maintainability (testability, dead code). - False-positive filtering: Cross-checks every candidate finding against a reference list of intentional simplicity, project conventions, and unreachable-state defenses so only real defects get reported. - Severity triage and structured reporting: Classifies each finding as Blocker, Should-fix, Nit, or Question, and reports it with file:line, a one-sentence defect description, and a concrete triggering scenario. - Use Case: After writing a non-trivial module — say, an async service that fetches third-party data under a shared lock — ask for a quality review. The Skill will catch issues like an unbounded await inside the lock with no timeout, cite the exact line, and explain the freeze scenario. ## Quick Start Review the module I just wrote in src/payments for correctness, design quality, and robustness issues, and report findings with severity levels.

Frequently Asked Questions about code-quality-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for quality and design issues?

Ask for a quality review of the target files or module. The review works through five checklists — correctness, design and architecture, coding standards, robustness, and maintainability — and reports each finding with a file:line citation, severity tier, and a concrete scenario that triggers the defect.

What is the difference between this and a git diff code review?

A diff-focused review scans changed lines for correctness bugs and simplifications. This review goes deeper on architecture and design quality and works on code that is not in a diff at all — a whole file, a module, or a design in progress.

How are code review findings prioritized by severity?

Each finding is triaged into Blocker, Should-fix, Nit, or Question. Blockers cause incorrect output, security holes, resource leaks, or broken API contracts on reachable paths; Should-fix covers real but bounded defects; Nits are optional polish; ambiguous items become Questions.

Can it review concurrency and security-sensitive code?

Yes. A deep-pass checklist covers race conditions, check-then-act interleavings, lock ordering, injection, secrets in code, path traversal, SSRF, and weak cryptography. It is consulted for concurrent, security-sensitive, or performance-critical code rather than every quick review.

How does it avoid false positives in code review?

Every candidate finding is checked against a false-positives reference covering intentional simplicity, project style conventions, genuinely reachable defensive checks, and provably unreachable conditions. Matching findings are dropped or demoted to a Question instead of being reported as defects.

When should I not use a full code quality review?

Skip the deep pass for quick sanity checks on low-stakes code, one-off scripts, or throwaway tools with known operators and inputs. The five-category checklist in the main flow suffices there; the deep-pass checklist is reserved for critical or unfamiliar code.