code-review

Review code for bugs, security flaws, and maintainability in pull requests.

2|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/chicongst/agent-skills-installer --skill code-review-chicongst
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/chicongst/agent-skills-installer/tree/main/skills/code-review
Command: npx skills add https://github.com/chicongst/agent-skills-installer --skill code-review-chicongst

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Review code for bugs, maintainability, correctness, edge cases, and architecture issues.

Core Features & Use Cases

  • Correctness: Ensure code does what it's supposed to do, catch off-by-one errors, null risks, and logic flaws.
  • Security: Identify vulnerabilities such as injection, auth bypass, secrets exposure, and unsafe deserialization.
  • Maintainability: Improve readability, naming, and modular design to ease future changes.
  • Performance: Highlight bottlenecks, unnecessary allocations, and missing optimizations.
  • Testing: Recommend tests that exercise critical paths and edge cases.

Quick Start

Provide a thorough code review focusing on the task context provided, producing a structured report with actionable recommendations.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code reviews for bugs and security flaws in pull requests?

Automating code reviews applies a structured rubric to pull requests and code changes to identify bugs, security flaws, and maintainability issues, surfacing critical findings with actionable fixes for safe, repeatable workflows.

What does a maintainability and architecture code review cover?

A maintainability and architecture code review evaluates readability, naming, and modular design to improve future changes. It checks for correctness, catches off-by-one errors, null risks, and highlights architectural issues within software engineering projects.

How do I identify security vulnerabilities like injection and auth bypass during code changes?

Identifying security vulnerabilities during code changes involves scanning for injection risks, auth bypass, secrets exposure, and unsafe deserialization. The review enforces a structured rubric to surface these critical findings alongside actionable fixes.

Can I use automated code review for performance bottlenecks and missing optimizations?

You can use automated code review for performance by analyzing code changes to highlight bottlenecks, unnecessary allocations, and missing optimizations. It assesses performance alongside correctness, security, and maintainability across engineering projects.

What is the best way to recommend tests for critical paths and edge cases in a pull request?

The best way to recommend tests for critical paths and edge cases is integrating a structured code review rubric that evaluates logic flaws and correctness, directly suggesting tests that exercise those specific vulnerable areas.

Does automated code review work without specific testing framework dependencies?

Yes, automated code review works without specific testing framework dependencies because it operates without external component requirements, applying a structured rubric directly to your code changes and pull requests across various platforms.