code-review

Evaluate code quality for security, performance, and maintainability issues.

Updated Aug 22, 2025
One-click install
npx skills add https://github.com/cdub615/dotfiles --skill code-review-cdub615
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/cdub615/dotfiles/tree/main/opencode/.config/opencode/skill/code-review
Command: npx skills add https://github.com/cdub615/dotfiles --skill code-review-cdub615

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured, repeatable approach to code reviews, helping teams identify security vulnerabilities, performance bottlenecks, best-practice deviations, and maintainability concerns before merging.

Core Features & Use Cases

  • Structured Review Template: Guides reviewers through security, performance, readability, and maintainability checks.
  • PR & Audit Readiness: Applicable during pull requests, code audits, and ongoing quality assurance to improve code quality.
  • Actionable Guidance: Converts findings into concrete recommendations and follow-up tasks for developers.

Quick Start

Review the current pull request using the code-review criteria to identify security, performance, and maintainability issues.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a structured code review for security and performance issues?

A structured code review evaluates security, performance, and maintainability by enforcing concrete criteria for validation, authentication, error handling, and testing. It guides reviewers through a template to identify vulnerabilities and bottlenecks before merging code.

What criteria should I check during a pull request code audit?

During a pull request code audit, check concrete criteria including authentication, authorization, error handling, naming conventions, testing, and documentation to ensure code quality, security, and maintainability standards are met.

Can I use this code review approach across different tech stacks?

Yes, this code review approach applies across common tech stacks during PR reviews, code audits, and continuous integration checks, providing a deterministic method to evaluate code quality regardless of the specific framework.

What's the best way to identify maintainability concerns and best-practice deviations in my code?

The best way to identify maintainability concerns and best-practice deviations is using a structured review template that checks readability, naming, testing, and documentation, converting findings into actionable recommendations and follow-up tasks.

How do I convert code review findings into actionable guidance for developers?

Convert code review findings into actionable guidance by using a structured template that transforms identified vulnerabilities, bottlenecks, and maintainability issues into concrete recommendations and follow-up tasks for developers to address.

When do I need a structured approach for evaluating code quality in continuous integration?

You need a structured approach for evaluating code quality in continuous integration when you want to deterministically catch security vulnerabilities, performance bottlenecks, and maintainability issues before merging pull requests into your main branch.