code-review

Analyze code for security vulnerabilities, performance issues, and maintainability defects.

9|2|Updated Mar 2, 2026
One-click install
npx skills add https://github.com/botlearn-ai/botlearn-skills --skill code-review-botlearn-ai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/botlearn-ai/botlearn-skills/tree/main/skills/code-review
Command: npx skills add https://github.com/botlearn-ai/botlearn-skills --skill code-review-botlearn-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Systematic evaluation of codebases to identify security vulnerabilities, performance bottlenecks, and maintainability issues, delivering actionable, prioritized findings to accelerate safe, reliable software delivery.

Core Features & Use Cases

  • Static analysis of code for security weaknesses aligned with OWASP Top 10.
  • Detection of performance anti-patterns, code smells, and maintainability concerns.
  • Severity-classified findings with concrete, copy-pasteable fixes and remediation guidance.
  • Suitable for code reviews, CI checks, and contributor onboarding across languages and ecosystems.

Quick Start

Provide a code snippet or repository path and receive a structured, prioritized review report with concrete remediation steps.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security code review aligned with OWASP Top 10?

To run a security code review aligned with OWASP Top 10, provide a code snippet or repository path for static analysis. The system returns a structured, severity-classified findings report with concrete, copy-pasteable fixes.

Can I use static analysis to detect performance anti-patterns like N+1 queries?

Static analysis can detect performance anti-patterns like N+1 queries by evaluating your codebase. It identifies bottlenecks and race conditions, returning prioritized findings with concrete fixes to improve application performance.

What is the best way to get actionable code review findings with copy-pasteable fixes?

The best way to get actionable code review findings with copy-pasteable fixes is to submit your code for systematic static analysis. You receive a structured report featuring severity classifications and an overall health assessment.

Does this code review tool work across multiple programming languages?

This code review tool works across multiple programming languages and ecosystems. It applies static analysis to typical software repositories and code snippets to identify security, performance, and maintainability defects universally.

How do I assess code maintainability and identify code smells in my repository?

To assess code maintainability and identify code smells, run a static analysis on your repository path. The evaluation detects maintainability concerns and returns an overall health assessment with prioritized remediation guidance.