code-review

Review source files and git diffs for logic, security, and maintainability issues.

1|Updated Apr 13, 2026
One-click install
npx skills add https://github.com/avoidthekitchen/avilingo-v2 --skill code-review-avoidthekitchen
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/avoidthekitchen/avilingo-v2/tree/main/.agents/skills/code-review
Command: npx skills add https://github.com/avoidthekitchen/avilingo-v2 --skill code-review-avoidthekitchen

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured, language-agnostic first-pass code review to quickly identify logic errors, operation-ordering risks, bad practices, security exposures such as SQL injection or hardcoded secrets, duplicated magic values, and pattern-level opportunities for clearer abstractions so reviewers can triage and prioritize fixes before deeper language-specific analysis.

Core Features & Use Cases

  • Six focused review passes that check for logic errors, operation ordering, bad practices, security issues, magic strings and values, and pattern improvements.
  • Flexible input handling supporting single files, git diffs with multiple hunks, and targeted repository exploration only when needed to resolve ambiguous references.
  • Actionable, prioritized output that groups findings by severity with location, which pass flagged the issue, a clear description of the problem, and a concrete fix or suggested code change.
  • Use case: Paste a pull-request diff to rapidly surface critical bugs, SQL injection risks, and maintainability problems before merging.

Quick Start

Paste the file or git diff you want reviewed and request a language-agnostic first-pass code review with findings grouped by severity.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a code review on a git diff to find logic and security issues?

To perform a code review on a git diff, paste the diff to run six focused passes that check for logic errors, operation ordering, security issues like SQL injection, and bad practices, returning grouped findings with concrete fixes.

What is language-agnostic static analysis and when do I need it?

Language-agnostic static analysis is a first-pass code review that identifies maintainability issues and security exposures without requiring language-specific tooling, useful when you need to triage source files before deeper specialized analysis.

Can I review a single source file for SQL injection and bad practices without a full repository setup?

Yes, you can review a single source file for SQL injection and bad practices by providing the file directly, and the review only requires targeted repository exploration if ambiguous references need resolving during an audit.

What's the best way to prioritize bug-finding results from a pull request diff review?

The best way to prioritize bug-finding results is to group findings by severity, which provides the location, the specific review pass that flagged the issue, a clear description, and a suggested code snippet for each fix.

Does language-agnostic code review detect hardcoded secrets and magic values?

Yes, language-agnostic code review detects hardcoded secrets and duplicated magic values through dedicated review passes that surface pattern-level opportunities for clearer abstractions and security improvements.

What are the limitations of a first-pass code review for operation ordering risks?

A first-pass code review for operation ordering risks is limited to pattern-level identification and should be followed by deeper language-specific analysis to catch complex context-dependent bugs not visible in the diff.