code-review-and-audit

Automate code review, security audits, and compliance verification in CI/CD pipelines.

Updated Jan 23, 2026
One-click install
npx skills add https://github.com/jnPiyush/AI-Squad --skill code-review-and-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-and-audit
Source: https://github.com/jnPiyush/AI-Squad/tree/main/ai_squad/skills/code-review-and-audit
Command: npx skills add https://github.com/jnPiyush/AI-Squad --skill code-review-and-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires dotnet-sdk, PowerShell, and includes scripts (resource) components.

What problem does it solve?

This Skill automates the systematic validation of code implementations through standardized review practices, automated checks, security audits, and compliance verification to reduce risk and improve quality.

Core Features & Use Cases

  • Pre-Review Automated Checks: Run automated formatting, build, tests, and vulnerability scans before human review.
  • Review Checklists & ADRs: Maintain structured review guidelines and architecture decision records to ensure design compliance.
  • Security & Compliance Audits: Provide repeatable security checks and regulatory verification across CI/CD pipelines.
  • Use Case: In a CI workflow, run the pre-review script to catch formatting, build, and vulnerability issues before merging.

Quick Start

Run the pre-review checks using the provided scripts.

  • Bash: bash ./scripts/pre-review-check.sh
  • PowerShell: pwsh ./scripts/Pre-Review-Check.ps1

Frequently Asked Questions about code-review-and-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security audits and code reviews in a CI/CD pipeline?

Automated security audits and code reviews in a CI/CD pipeline are handled by running pre-review scripts that execute formatting, build, test, and vulnerability scans before human review. The skill enforces structured checklists and compliance verification across automated workflows.

Does this code review automation tool support dotnet and PowerShell environments?

Code review automation supports dotnet and PowerShell environments by providing dedicated pre-review scripts, such as Pre-Review-Check.ps1. It executes vulnerability assessments and compliance verification specifically within dotnet development workflows.

What is the best way to enforce compliance verification before merging code?

Compliance verification before merging code is best enforced through automated pre-review checks and manual review checklists. This skill applies repeatable security checks and architecture decision records to validate design compliance within CI pipelines.

How do I run pre-review checks for static analysis and vulnerability scanning?

Pre-review checks for static analysis and vulnerability scanning are run by executing the provided shell or PowerShell scripts. Running bash ./scripts/pre-review-check.sh or pwsh ./scripts/Pre-Review-Check.ps1 initiates automated formatting and security vulnerability assessments.

Can I use this for manual review checklists and architecture decision records?

Manual review checklists and architecture decision records are supported to ensure design compliance alongside automated checks. The skill maintains structured review guidelines to systematically validate code implementations after automated vulnerability scans pass.

Why do I need automated static analysis and vulnerability assessments in my development workflow?

Automated static analysis and vulnerability assessments are needed to reduce risk and improve software quality systematically. They provide repeatable security checks and regulatory verification across CI/CD pipelines before human review, catching formatting and build issues early.