Code Review (CR)

Review code for production safety, security, and maintainability.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/idallasj/oneclaw --skill code-review-cr
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Code Review (CR)
Source: https://github.com/idallasj/oneclaw/tree/main/llm_settings/skills/cr
Command: npx skills add https://github.com/idallasj/oneclaw --skill code-review-cr

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides expert-level code review, focusing on production safety, security, and maintainability, ensuring high-quality code before deployment.

Core Features & Use Cases

  • Security Audits: Prioritizes review of critical security areas like authentication, authorization, and data validation.
  • Production Readiness: Checks for rollback paths, blast radius, cost controls, and test isolation.
  • Code Quality: Assesses functionality, performance, and readability, flagging large changes.
  • Use Case: A team is submitting a Pull Request for a new API endpoint. This Skill will review the code for potential security vulnerabilities, ensure it has a clear rollback plan, and verify that tests are properly isolated from production data.

Quick Start

Use the CR skill to review the attached code changes for production safety and security.

Frequently Asked Questions about Code Review (CR)

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on a pull request for a new API endpoint?

A security audit on a pull request checks authentication, authorization, data validation, and API endpoints against OWASP Top 10 and CWE Top 25 standards. It identifies potential vulnerabilities in your code before deployment.

What production safety checks should I run before deploying code changes?

Production safety checks validate test isolation, rollback paths, blast radius, cost controls, alert suppression, and backup steps. These checks ensure your deployment is safe, reversible, and will not disrupt existing services.

Can I use a code review skill to check my IAM policies and S3 bucket policies?

Yes, a code review skill analyzes IAM policies and S3 bucket policies for security misconfigurations. It reviews database credentials and cryptography to prevent unauthorized access and data breaches.

What is the best way to enforce code maintainability limits in a code review?

To enforce code maintainability, a code review flags large changes by applying the 400-line rule. It assesses functionality, performance, readability, and static analysis to ensure high-quality, manageable code.

Does an automated code review check for rollback paths and blast radius?

Yes, automated code review validates rollback paths and blast radius as part of production readiness. It ensures you have a clear recovery plan and understands the potential impact scope of the changes.