code-review

Automate pull request code reviews for security, performance, quality, and testing issues.

417|7|Updated Jan 12, 2026
One-click install
npx skills add https://github.com/Asymmetric-al/core --skill code-review-asymmetric-al
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/Asymmetric-al/core/tree/main/.cursor/skills/code-review
Command: npx skills add https://github.com/Asymmetric-al/core --skill code-review-asymmetric-al

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the process of reviewing code changes, identifying potential issues related to security, performance, quality, and testing, thereby improving the overall codebase.

Core Features & Use Cases

  • Security Audits: Detects vulnerabilities like SQL injection, XSS, and hardcoded secrets.
  • Performance Analysis: Identifies N+1 queries, memory leaks, and inefficient operations.
  • Code Quality Checks: Flags code duplication, poor naming, and complex logic.
  • Testing Review: Ensures adequate test coverage and checks for flaky tests.
  • Use Case: Before merging a pull request, use this Skill to get a comprehensive automated review that highlights critical issues and suggests improvements.

Quick Start

Use the code-review skill to analyze the provided code changes for security vulnerabilities and performance bottlenecks.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review for pull requests to check for security vulnerabilities?

Automated code review analyzes pull requests to identify security vulnerabilities like SQL injection, XSS, command injection, and hardcoded secrets. It scans code changes against best practices, flagging improper authentication and insecure deserialization before merging.

What is an N+1 query and how can I detect it during a code review?

An N+1 query is a performance issue where database records are fetched in redundant loops. Code review detects this by analyzing code changes for inefficient operations, missing database indexes, and memory leaks to ensure optimal performance.

How do I check test coverage and find flaky test patterns in my code changes?

Reviewing tests involves verifying test coverage and analyzing test behavior to detect flaky test patterns. It checks for missing edge cases and validates how external dependencies are mocked, ensuring testing quality in your pull requests.

Can I use automated code audits to find code duplication and magic numbers?

Yes, code audits assess code quality by checking for duplication, Single Responsibility Principle violations, deep nesting, magic numbers, poor naming, and incomplete type coverage. This improves overall codebase maintainability.

Does automated code review work for identifying memory leaks and blocking operations?

Automated code review detects performance issues including memory leaks and blocking operations in async code. It also identifies missing caching opportunities and large bundle sizes during pull request analysis.