skills.rest
devsajad
devsajadCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

code-review

Review code changes for security, performance, correctness, and maintainability issues.

Updated Aug 27, 2026
Search Tags:#code quality#diff analysis#code review#performance#pull request#owasp#security audit
One-click install
npx skills add https://github.com/devsajad/next.js-starter-kit --skill code-review-devsajad
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/devsajad/next.js-starter-kit/tree/main/.claude/skills/code-review
Command: npx skills add https://github.com/devsajad/next.js-starter-kit --skill code-review-devsajad

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Manually reviewing pull requests and diffs for security vulnerabilities, performance bottlenecks, and logic errors is time-consuming and easy to get wrong under deadline pressure. This Skill applies a structured review checklist so critical issues like injection risks, N+1 queries, and missing error handling are caught before merge. ## Core Features & Use Cases - Security Audit: Checks for OWASP top 10 issues including SQL injection, XSS, CSRF, exposed secrets, path traversal, and SSRF. - Performance & Correctness Analysis: Detects N+1 queries, memory leaks, algorithmic complexity problems, race conditions, and edge-case gaps. - Structured Review Output: Produces a summary, severity-ranked issue tables, suggestions, positive observations, and an approve/request-changes verdict. - Use Case: Paste a PR URL or diff before merging and receive a prioritized list of critical issues with file and line references, plus actionable fix suggestions. ## Quick Start Ask the assistant to review a pull request URL, pasted diff, or file path for security and performance issues before merging.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a pull request for security issues?▼

Provide the PR URL, pasted diff, or file path and request a review. The review checks for OWASP top 10 risks including SQL injection, XSS, CSRF, exposed secrets, path traversal, and SSRF, then reports findings with file and line references.

How to detect N+1 queries and performance problems in code changes?▼

Submit the diff or files for a performance-focused review. The analysis covers N+1 queries, unnecessary memory allocations, algorithmic complexity in hot paths, missing database indexes, unbounded loops, and resource leaks.

Can I review a pasted diff instead of a PR URL?▼

Yes, the review works standalone with a pasted diff, a PR URL, or a direct file path. If source control connectors are configured, the PR diff can also be pulled automatically along with CI status.

What does the code review output include?▼

The output contains a summary, a table of critical issues with severity ratings, a suggestions table categorized by concern, positive observations, and a final verdict of Approve, Request Changes, or Needs Discussion.

When should I not rely on an automated code review?▼

Automated review does not replace human judgment for architectural decisions, business logic intent, or domain-specific requirements. Use it to catch mechanical issues like injection risks and edge cases, then verify design choices manually.

Related Skills

Explore More Software Engineering Skills→
tarabakz25tarabakz25
1

create-github-pr

Creates GitHub pull requests from branch diffs using gh CLI or GitHub MCP.

Community
Intermediate
UnterrainerInformatikUnterrainerInformatik

java-code-review

Reviews Java code for null safety, exceptions, concurrency, and performance issues.

Official
Intermediate
Sir-chawakornSir-chawakorn
33

pr-review

Automate Pull Request reviews for code quality, security, and performance.

Community
Advanced
lxh755818-botlxh755818-bot

requesting-code-review

Automate pre-commit code review with security scans, linting, and testing.

Community
Advanced