code-review

Name: code-review
Availability: InStock
Author: 0xursanomics

Review scripts and infrastructure for security vulnerabilities and correctness issues.

2|Updated Jul 22, 2026

Search Tags:#static analysis #code review #best practices #security audit #infrastructure #staff engineer

Ready to run

npx skills add https://github.com/0xUrsanomics/utopia-os --skill code-review-0xursanomics

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/0xUrsanomics/utopia-os/tree/main/skills/code-review
Command: npx skills add https://github.com/0xUrsanomics/utopia-os --skill code-review-0xursanomics

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a rigorous, high-standard code review process that identifies critical bugs, security vulnerabilities, and architectural flaws in scripts and infrastructure, preventing the deployment of unstable or insecure code.

Core Features & Use Cases

Staff-Level Audit: Enforces strict standards for correctness, security, and simplicity without hand-holding.
Security-First Gates: Automatically checks for hardcoded credentials, command injection risks, and unsafe file operations.
Use Case: Before deploying a new automation script or updating a production daemon, use this skill to perform a comprehensive scan for race conditions, error-path handling, and dependency risks.

Quick Start

Run the code-review skill on the file scripts/data_harvester.py to perform a full security and correctness audit.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a staff-level code review on automation scripts?▼

A security-first code audit identifies hardcoded credentials, command injection risks, unsafe file operations, race conditions, and error-path handling issues. It acts as an automated security gate to prevent the deployment of unstable or insecure infrastructure code.

How do I run a security audit on infrastructure changes before production deployment?▼

To run a security audit on infrastructure changes before production deployment, execute this skill on your target files. It performs a comprehensive scan to identify dependency risks and correctness issues, preventing unstable code from reaching production.

Does this static analysis tool check for race conditions and unsafe file operations?▼

Yes, this static analysis tool checks for race conditions and unsafe file operations. It rigorously evaluates scripts and infrastructure changes to identify critical bugs, security vulnerabilities, and architectural flaws during the source code review process.

What are the limitations of automated security gatekeeping for software development workflows?▼

The limitation of automated security gatekeeping is that it requires strict adherence to correctness and security standards without providing hand-holding. It focuses exclusively on identifying vulnerabilities and correctness issues rather than fixing them automatically.