code-review

Review git diffs for security, performance, and logic issues.

5|1|Updated Mar 18, 2023
One-click install
npx skills add https://github.com/DavidDworetzky/Geist --skill code-review-daviddworetzky
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/DavidDworetzky/Geist/tree/main/.claude/skills/code-review
Command: npx skills add https://github.com/DavidDworetzky/Geist --skill code-review-daviddworetzky

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides automated, thorough reviews of files changed in the current git working directory to identify security vulnerabilities, performance issues, logic bugs, and deviations from project coding standards.

Core Features & Use Cases

  • Security-focused reviews aligned with OWASP Top 10 on diffs
  • Performance and correctness analysis for modified code
  • Enforces maintainability and coding standards across teams
  • Use Case: Before merging a feature branch, run a change-diff review to surface risks and recommended improvements.

Quick Start

Review the latest git changes with the code-review capability to surface security and quality issues.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code reviews for git diffs before merging?

Code reviews on git diffs identify security vulnerabilities, performance issues, and logic bugs by reading modified files in your working directory. It checks for OWASP Top 10 risks, ORM N+1 patterns, and deviations from project standards defined in claude.md and agents.md.

Can I check my modified code for OWASP Top 10 security vulnerabilities automatically?

Checking modified code for OWASP Top 10 vulnerabilities is supported during the review process. It scans git diffs for security risks and uses project standards from claude.md and agents.md to ensure ongoing QA and maintainability across your team.

How do I detect ORM N+1 query patterns in my changed files?

Detecting ORM N+1 patterns in changed files is handled during the performance analysis phase. The review reads git diffs and explicitly checks for these performance issues alongside security vulnerabilities and deviations from project coding standards.

Does the code review enforce project coding standards from agents.md?

Project coding standards from agents.md are actively used to evaluate your modified files. The review process reads these project guidelines alongside git diffs to detect deviations and maintain coding consistency across your team.

What is the best way to run a pre-commit code quality check on modified git files?

Pre-commit code quality checks on modified git files are performed by analyzing the working directory diff. This surfaces risks like OWASP Top 10 vulnerabilities and logic bugs, providing actionable feedback before changes are merged.