code-review-assistant

Analyze code changes for bugs, vulnerabilities, and missing tests across multiple languages.

195|12|Updated Jul 19, 2026
One-click install
npx skills add https://github.com/ZJU-REAL/HugAgentOS --skill code-review-assistant-zju-real
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-assistant
Source: https://github.com/ZJU-REAL/HugAgentOS/tree/main/src/backend/skill_bundles/marketplace/cody
Command: npx skills add https://github.com/ZJU-REAL/HugAgentOS --skill code-review-assistant-zju-real

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps developers identify bugs, security vulnerabilities, performance problems, maintainability issues, type-safety risks, error-handling gaps, and missing test coverage without manually inspecting every change.

Core Features & Use Cases

  • Multi-source Review: Analyze local Git diffs, staged changes, branch comparisons, selected files, pasted code, and GitHub or GitLab pull request diffs.
  • Configurable Analysis: Support information, optimization, standard, and strict review modes across Python, JavaScript, TypeScript, Java, Go, and Rust.
  • Structured Reports: Produce actionable Chinese-language reports with line references in Markdown, JSON, or HTML formats for development workflows and CI integration.
  • Use Case: Review a GitHub pull request in strict mode, identify security and correctness issues, and generate a structured report suitable for sharing with the engineering team.

Quick Start

Ask the code review assistant to review the latest Git changes in standard mode and return an actionable Markdown report in Chinese.

Frequently Asked Questions about code-review-assistant

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a GitHub pull request for security vulnerabilities and bugs?

You can review a GitHub pull request for security vulnerabilities and bugs by analyzing the pull request diff in strict mode. This identifies security vulnerabilities and correctness issues, generating a structured report with line-level recommendations suitable for sharing with your engineering team.

Can I run static analysis on a local Git diff for Python and TypeScript code?

Yes, you can run static analysis on a local Git diff for Python and TypeScript code. The tool analyzes local Git diffs, staged changes, and selected files across Python, JavaScript, TypeScript, Java, Go, and Rust to detect type-safety risks and maintainability concerns.

What is the best way to generate a code review report for CI integration?

The best way to generate a code review report for CI integration is to analyze code changes and output structured JSON or HTML. This automated static analysis detects error-handling gaps and missing test coverage, producing actionable reports directly within your development workflows.

Does code review support different severity levels for bug detection?

Yes, code review supports different severity levels for bug detection through configurable analysis modes. You can choose information, optimization, standard, or strict review modes to adjust the depth of bug detection, security analysis, and performance issue identification.

How do I check pasted code for error-handling gaps and performance issues?

To check pasted code for error-handling gaps and performance issues, you can submit the pasted code directly for analysis. The tool evaluates the code to identify performance problems, error-handling gaps, and missing test coverage, returning actionable recommendations.

When should I use strict mode over standard mode for static code analysis?

You should use strict mode over standard mode for static code analysis when you need deeper security analysis and correctness verification, such as reviewing critical GitHub pull requests. Standard mode suits routine checks, while strict mode identifies high-severity vulnerabilities and type-safety risks.