code-review

Analyze code changes for security, performance, and correctness across pull requests or diffs.

6|3|Updated Mar 31, 2026
One-click install
npx skills add https://github.com/alo-exp/silver-bullet --skill code-review-alo-exp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/alo-exp/silver-bullet/tree/main/forge/skills/engineering-code-review
Command: npx skills add https://github.com/alo-exp/silver-bullet --skill code-review-alo-exp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Code changes can introduce security risks, performance issues, and correctness gaps. This Skill provides a structured lens to review diffs, PRs, and commits for these dimensions, helping teams catch defects early.

Core Features & Use Cases

  • Security-focused checks for injections, auth, and secret leakage.
  • Performance and correctness evaluation, edge-case analysis, and maintainability suggestions.
  • Use Case: Apply to a PR diff to surface critical vulnerabilities and suggested fixes before merging.

Quick Start

Review a PR URL or diff with /code-review <PR URL or diff>.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze a pull request diff for security vulnerabilities and performance issues?

Analyze a pull request diff for security and performance issues by applying a structured review lens to the code changes. This process evaluates security risks, performance bottlenecks, and correctness gaps across commits to surface actionable findings and remediation guidance before merging.

What is the best way to automate secure code reviews across diverse repositories and languages?

Automated code review across diverse repositories and languages applies structured checks for security, performance, correctness, and maintainability to pull requests or file diffs. This approach surfaces critical vulnerabilities, edge cases, and suggested fixes to help teams catch defects early.

Can I use static analysis to check commits for secret leakage and injection risks?

Static analysis checks commits for secret leakage and injection risks by evaluating code changes against security-focused rules. This review process identifies authentication flaws, secret exposure, and injection vulnerabilities within the diff, producing actionable remediation guidance.

Does this code review process work with any Git repository or language?

This code review process works with diverse repositories and languages because it analyzes the pull request or file diff directly. It evaluates security, performance, correctness, and maintainability regardless of the underlying repository or programming language.

What dimensions are covered when evaluating code maintainability and correctness in a PR?

Evaluating code maintainability and correctness in a PR covers security, performance, edge-case analysis, and structural maintainability. The review enforces a structured analysis across these dimensions to produce actionable findings and targeted remediation guidance.

How do I review a PR URL to surface critical vulnerabilities and suggested fixes?

Review a PR URL to surface critical vulnerabilities and suggested fixes by passing the URL or diff to the automated review process. It analyzes the code changes for security risks, performance issues, and correctness gaps, outputting actionable findings and remediation steps.