code-review

Scan uncommitted code changes for vulnerabilities and quality defects before commit.

Updated Jan 16, 2026
One-click install
npx skills add https://github.com/Eotel/claude-marketplace --skill code-review-eotel
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/Eotel/claude-marketplace/tree/main/plugins/base/skills/code-review
Command: npx skills add https://github.com/Eotel/claude-marketplace --skill code-review-eotel

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates security and quality checks on uncommitted code changes to catch issues before commit.

Core Features & Use Cases

  • Automated security checks for credentials, API keys, SQL injections, XSS, and insecure dependencies.
  • Quality gates for maintainability: long functions, deep nesting, missing error handling, and missing documentation.
  • Pre-commit risk reporting and block on high-severity findings to prevent harmful commits.

Quick Start

Review the current uncommitted changes to identify security and quality issues and generate a risk report.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security and quality checks for uncommitted code changes?

Pre-commit review scans uncommitted code changes to identify critical vulnerabilities, quality issues, and best-practice gaps. It blocks commits for critical or high-severity findings, generating a risk report with issue severity, file location, and suggested fixes.

What security vulnerabilities can pre-commit static analysis detect in my code?

Pre-commit static analysis detects security vulnerabilities including credentials, API keys, SQL injections, XSS, and insecure dependencies. It scans changed files to prevent harmful commits before they enter the repository.

How do I block git commits with high-severity findings automatically?

Block git commits automatically by running pre-commit code vetting that identifies high-severity findings. The review process blocks commits for critical or high-severity security vulnerabilities and quality issues, preventing harmful changes from entering the repository.

What code quality gates should I check before committing changes?

Code quality gates for pre-commit review check maintainability issues like long functions, deep nesting, missing error handling, and missing documentation. The vetting process identifies these quality issues by file location and severity to prevent harmful commits.

Can I use automated code review for local development workflows without external dependencies?

Yes, automated code review works for local development workflows and pre-commit scenarios without external dependencies. It scans uncommitted changed files directly, applying security and quality checks to identify issues by severity and suggest fixes.