code-review

Automate code reviews for security, correctness, and maintainability across Python, JavaScript/TypeScript, Go, and Rust.

Updated Mar 11, 2026
One-click install
npx skills add https://github.com/AaronZhou-THU/OpenAgent --skill code-review-aaronzhou-thu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/AaronZhou-THU/OpenAgent/tree/main/agent-api/src/agent_service/data/skills/code-review
Command: npx skills add https://github.com/AaronZhou-THU/OpenAgent --skill code-review-aaronzhou-thu

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Conducting thorough, consistent code reviews is time-consuming and error-prone; this Skill standardizes security, correctness, performance, and maintainability assessments across languages to accelerate high-quality PRs.

Core Features & Use Cases

  • Security & compliance checks: identify common vulnerabilities, insecure patterns, and policy violations across Python, JavaScript/TypeScript, Go, and Rust.
  • Correctness & maintainability analysis: verify logic, edge cases, readability, and adherence to style guides; provide actionable remediation.
  • Use Case: reviewers can generate a structured findings report with severity, location, and suggested fixes for each PR.

Quick Start

Run a standard code review on a sample PR to generate a findings report.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security and correctness checks for a pull request?

Automating code reviews for pull requests standardizes security and correctness checks. This process identifies common vulnerabilities and logic errors, generating a structured findings report with severity, location, and actionable remediation guidance.

Does automated code review work with Python, JavaScript, TypeScript, Go, and Rust?

Automated code review supports Python, JavaScript, TypeScript, Go, and Rust projects. It applies language-specific static analysis to verify logic, edge cases, and style guide adherence, ensuring consistent quality assurance across these multi-language environments.

What is the best way to structure code review findings for maintainability analysis?

The best way to structure code review findings is using a formal checklist format. This includes documenting severity, location, and suggested fixes for each issue, providing actionable remediation steps to accelerate high-quality pull requests.

Can I check for insecure patterns and dependency vulnerabilities during a code review?

Yes, you can check for insecure patterns and dependency vulnerabilities during a code review. The process identifies common security flaws, policy violations, and analyzes dependencies to ensure software quality and compliance.

How do I enforce a consistent code review workflow across different projects?

Enforcing a consistent code review workflow requires a formal checklist and standardized findings format. This approach standardizes security, correctness, performance, and maintainability assessments across different projects, reducing error-prone manual reviews.

When do I need static analysis for code correctness verification?

Static analysis for code correctness verification is needed when reviewing pull requests to identify logic errors and edge cases. It provides actionable remediation guidance to improve maintainability before merging code changes.