code-review

Review code for security, style, performance, and best-practice issues.

5|1|Updated Nov 21, 2025
One-click install
npx skills add https://github.com/ANcpLua/ancplua-claude-plugins --skill code-review-ancplua
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/ANcpLua/ancplua-claude-plugins/tree/main/plugins/code-review/skills/code-review
Command: npx skills add https://github.com/ANcpLua/ancplua-claude-plugins --skill code-review-ancplua

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates comprehensive code reviews, ensuring security, style, performance, and best practices are thoroughly checked.

Core Features & Use Cases

  • Security audit: Scan for injection flaws, auth/authorization gaps, sensitive data exposure.
  • Style & maintainability: Enforce naming, formatting, documentation, and DRY principles.
  • Performance & best practices: Detect N+1 queries, heavy computations, and error handling issues.
  • Report generation: Produce a structured findings summary for PR feedback.

Quick Start

Run the code-review workflow against your latest changes to generate a structured report.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities in my code before merging?

Automated code review scans for injection flaws, authentication gaps, and sensitive data exposure to catch security issues before deployment. Run it on pull requests or pre-commit to generate structured findings for remediation.

What coding standards and style issues can code review detect?

Code review enforces naming conventions, formatting, documentation, DRY principles, and single-responsibility patterns. It produces a findings summary highlighting style and maintainability violations across your codebase.

Can I use code review to find performance bottlenecks?

Yes. Code review detects N+1 queries, heavy computations, error handling gaps, and logging issues. It analyzes existing code or recent changes to identify performance and best-practice violations with actionable guidance.

How do I audit legacy code for security and quality issues?

Run code review against existing projects to perform comprehensive security audits and quality assessments. It identifies injection vulnerabilities, insecure dependencies, test coverage gaps, and compliance violations in a structured report.

What output does code review generate for pull request feedback?

Code review produces a structured findings report categorizing security, style, performance, and best-practice issues. Use this report to guide code changes and document review decisions during pre-merge gates.

Do I need static analysis tools or linters already in place to use code review?

No dependencies or prerequisites are required. Code review performs its own comprehensive scanning for security, style, performance, and best practices without requiring external static analysis setup.