skills.rest
caicai557
caicai557COMMUNITY
Explore all skills by this author →
GitHub

code-review

Scan code diffs for security issues and quality problems, then output a YAML review summary.

Updated Aug 27, 2026
Search Tags:#security#quality#review#PR#code-review
One-click install
npx skills add https://github.com/caicai557/windsurf-project --skill code-review-caicai557
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/caicai557/windsurf-project/tree/main/.agent/skills/code-review
Command: npx skills add https://github.com/caicai557/windsurf-project --skill code-review-caicai557

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill standardizes code reviews to ensure security, quality, and contract compliance before merges.

Core Features & Use Cases

  • Security scan
  • Quality checks
  • Output YAML summary

Quick Start

Trigger phrases:

  • "Review this code"
  • "Check PR before merge"
  • "Security review"

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for security vulnerabilities before merging?▼

Code review with security scanning identifies vulnerabilities like SQL injection, unsafe eval/exec patterns, and path traversal in pull requests. The Skill parses git diffs, scans for secrets and dangerous code patterns, and outputs a structured YAML report with flagged issues before merge.

What quality checks can I enforce on code changes?▼

Quality checks validate code against contract conformity, decision consistency, and automated verification gates. The Skill executes `just verify`, checks .council/CONTRACTS.md and DECISIONS.md compliance, and surfaces quality issues in a summary report alongside security findings.

Can I automate code review across multiple repositories?▼

Yes. The Skill applies standardized review processes to code diffs and pull requests across repositories, gathering context from commit history and enforcing consistent security and quality gates to produce a unified YAML review summary.

What does the code review output include?▼

The review outputs a structured YAML summary containing identified security issues, quality violations, contract mismatches, and actionable suggestions. This report surfaces all findings in one place for merge decision-making.

Do I need to set up contracts and decisions files to use code review?▼

Contract validation requires .council/CONTRACTS.md and DECISIONS.md files in your repository. If absent, the Skill performs security and quality checks without contract conformity validation. These files are optional but enable stricter consistency enforcement.

Related Skills

Explore More Software Engineering Skills→
srirajksrirajk

Git Risk Analysis

Analyze git history to produce a structured PR risk profile.

Community
Advanced
Awannaphasch2016Awannaphasch2016

code-review

Automate code review for security, performance, and quality issues.

Community
Advanced
Dq666dingerDq666dinger
1

requesting-code-review

Automate pre-commit code verification with diff scanning and quality gates.

Community
Advanced
IndustrialIndustrial

code-reviewer

Analyze code for security vulnerabilities and performance issues.

Community
Advanced