code-review

Analyze source code for design flaws, security vulnerabilities, and performance bottlenecks.

9|Updated Feb 26, 2026
One-click install
npx skills add https://github.com/diegoscarabelli/system2 --skill code-review-diegoscarabelli
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/diegoscarabelli/system2/tree/main/src/server/agents/skills/code-review
Command: npx skills add https://github.com/diegoscarabelli/system2 --skill code-review-diegoscarabelli

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the inconsistency and oversight common in manual code reviews by providing a structured, multi-dimensional analysis of code quality, security, and performance.

Core Features & Use Cases

  • Multi-Dimensional Analysis: Evaluates code across design, logic, security (OWASP), performance, and SQL quality.
  • Context-Aware Review: Respects repository-specific guidelines and coding standards to minimize noise.
  • Use Case: Use this during a pull request to identify potential N+1 database queries, security vulnerabilities, or architectural flaws before they reach production.

Quick Start

Use the code-review skill to analyze the changes in the current pull request and provide feedback based on the project guidelines.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is static analysis for identifying security vulnerabilities and performance bottlenecks?

Static analysis evaluates source code without executing it to detect design flaws, security vulnerabilities, and performance bottlenecks. It applies multi-dimensional checks across logic, SQL efficiency, and test coverage during software development workflows.

How do I automate code review for a pull request to catch N+1 database queries?

To automate code review for a pull request, apply static analysis to the source changes. This process evaluates SQL efficiency to identify potential N+1 database queries and architectural flaws before they reach production environments.

Does automated code analysis work with project-specific coding standards?

Automated code analysis supports project-specific coding standards. The review process is context-aware, respecting repository-specific guidelines to minimize noise and ensure adherence to your defined architectural and logic requirements.

What's the best way to perform an architectural audit on source code?

The best way to perform an architectural audit is using comprehensive static analysis. This systematically evaluates design, logic, security, and SQL quality to identify structural flaws and ensure robust software engineering standards.

Why does manual code review miss security vulnerabilities and design flaws?

Manual code review misses security vulnerabilities and design flaws due to inconsistency and oversight. Automated static analysis solves this by providing a structured, multi-dimensional evaluation of code quality, security, and performance.

Can I use static analysis for pre-push validation in a software development workflow?

Static analysis is suited for pre-push validation in software development workflows. It systematically evaluates logic, SQL efficiency, and test coverage to identify potential issues before code changes are pushed to the repository.