code-review

Analyze pull requests and diffs for security, performance, and correctness.

1|Updated Mar 19, 2026

Search Tags:#performance #security #maintainability #edge-cases #code-review #correctness

Ready to run

npx skills add https://github.com/cy-wali/knowledge --skill code-review-cy-wali

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/cy-wali/knowledge/tree/main/engineering/skills/code-review
Command: npx skills add https://github.com/cy-wali/knowledge --skill code-review-cy-wali

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Reviews code changes for security, performance, and correctness, helping teams prevent regressions before merging.

Core Features & Use Cases

Structured security checks (OWASP top 10, common vulnerabilities) and risk scoring
Performance and correctness audits with actionable recommendations
Maintainability checks (readability, naming, modularity) across diffs

Quick Start

Provide a PR URL or diff to generate a prioritized code-review report and suggested fixes.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit code changes for security and correctness before merging?▼

To audit code changes for security and correctness, provide a pull request URL or diff to trigger automated analysis. This generates a prioritized code-review report with actionable recommendations to prevent regressions before merging.

Can I check my pull requests for OWASP top 10 vulnerabilities automatically?▼

Yes, you can check pull requests for OWASP top 10 vulnerabilities automatically. The review applies structured security checks and risk scoring to diffs to identify common vulnerabilities and ensure outputs align with security standards.

What is the best way to review code readability and modularity across a diff?▼

The best way to review code readability and modularity across a diff is to apply maintainability checks. This process evaluates naming conventions and structural modularity, providing clear, actionable recommendations to improve code quality.

Does automated code review provide actionable recommendations for edge cases?▼

Yes, automated code review provides actionable recommendations for edge cases. It assesses code changes for robust error handling and correctness, ensuring outputs align with performance best practices and mitigate potential regressions.

When do I need to trigger an automated code review on a file path?▼

You need to trigger an automated code review on a file path when you want to assess specific code changes for security, performance, and correctness. This generates a prioritized report with suggested fixes to prevent regressions.