code-review-assistant

Review code changes for correctness, security, and maintainability issues.

1|2|Updated Mar 10, 2026
One-click install
npx skills add https://github.com/santosomar/general-secure-coding-agent-skills --skill code-review-assistant-santosomar
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-assistant
Source: https://github.com/santosomar/general-secure-coding-agent-skills/tree/main/skills/code-quality/code-review-assistant
Command: npx skills add https://github.com/santosomar/general-secure-coding-agent-skills --skill code-review-assistant-santosomar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the process of performing a structured, in-depth code review, identifying critical issues that go beyond basic linting and ensuring code quality, security, and maintainability.

Core Features & Use Cases

  • Prioritized Review: Analyzes code correctness, error handling, security, performance, and maintainability in a strict order.
  • Contextual Feedback: Provides inline comments with severity levels (Blocking, Should-fix, Nit, Question) and a summary report.
  • Use Case: Use this Skill when reviewing a pull request to catch potential bugs, security vulnerabilities, or maintainability issues before merging code.

Quick Start

Use the code-review-assistant skill to review the attached code diff.

Frequently Asked Questions about code-review-assistant

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a structured code review on a pull request?

To perform a structured code review on a pull request, attach your code diff to the skill. It analyzes correctness, security, and maintainability, returning inline comments with severity levels alongside a summary report.

What is the best way to check code changes for security and maintainability issues?

Checking code changes for security and maintainability issues is best handled by analyzing code logic against stated intent and edge cases. This approach identifies vulnerabilities and maintainability flaws in a strict priority order.

Can I use this for pre-merge checks and second opinions on code modifications?

Yes, you can use this for pre-merge checks and second opinions on code modifications. It evaluates code modifications by analyzing logic against potential edge cases to catch bugs before integration.

How does automated code review handle error handling and correctness?

Automated code review handles error handling and correctness by prioritizing analysis of code logic against stated intent. It identifies critical issues beyond basic linting and categorizes them by severity levels like Blocking or Should-fix.

What severity levels are assigned to issues found during code review?

Severity levels assigned to issues found during code review include Blocking, Should-fix, Nit, and Question. These prioritized categories help developers understand the urgency of correctness, security, and maintainability feedback.

Are there limitations to using automated code review for debugging?

A limitation of automated code review for debugging is that it requires the attached code diff and stated intent to function. It focuses on logic and edge cases rather than replacing runtime debugging or basic linting checks.