code-review-expert

Review current git changes for design, security, and performance issues.

Updated May 17, 2026
One-click install
npx skills add https://github.com/cenjie/skills --skill code-review-expert-cenjie
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-expert
Source: https://github.com/cenjie/skills/tree/main/skills/code-review-expert
Command: npx skills add https://github.com/cenjie/skills --skill code-review-expert-cenjie

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps engineering teams and reviewers quickly and consistently evaluate current git changes to identify SOLID/design violations, security vulnerabilities, performance regressions, error-handling gaps, and unsafe removal candidates before merging.

Core Features & Use Cases

  • Structured git preflight: Scope changes with git status and diffs, summarize large diffs by file or module, and group related concerns by feature.
  • SOLID & architecture checks: Detect SRP, OCP, LSP, ISP, and DIP issues and recommend minimal, incremental refactors with rationale.
  • Security & reliability scanning: Flag XSS, injection, SSRF, race conditions, secrets leakage, and assess exploitability and impact.
  • Performance & code quality: Identify N+1 queries, CPU/memory hotspots, missing caching, swallowed exceptions, and boundary-condition bugs.
  • Removal planning: Find dead or unused code and produce safe-delete vs defer plans with verification steps and rollback guidance.

Quick Start

Review the current git changes and produce a prioritized code review summary with P0-P3 findings.

Frequently Asked Questions about code-review-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review git changes for SOLID violations and security vulnerabilities?

Review git changes for SOLID violations and security vulnerabilities by running a structured preflight that scopes diffs to detect SRP, OCP, LSP, ISP, and DIP issues alongside XSS, injection, and SSRF flaws. The skill produces prioritized P0-P3 findings with refactor rationale.

What is the best way to find dead code and plan safe removal in a pull request?

Finding dead code and planning safe removal in a pull request involves identifying unused or dead code candidates and generating a safe-delete versus defer plan. The skill provides verification steps and rollback guidance while awaiting explicit user confirmation before making changes.

Can I detect race conditions and N+1 queries in staged git changes?

Yes, you can detect race conditions and N+1 queries in staged git changes. The skill performs security and reliability scanning to flag race conditions and assess exploitability, while performance checks identify N+1 queries, CPU hotspots, and missing caching.

How does a code review handle large diffs and group related concerns?

A code review handles large diffs by using git status and diffs to scope changes, summarizing them by file or module. It groups related concerns by feature, producing reference-based checklists and incremental refactor plans mapped to severity levels.

Does the code review process check error-handling gaps and boundary-condition bugs?

Yes, the code review process checks error-handling gaps and boundary-condition bugs. It identifies swallowed exceptions and boundary issues during performance and code quality analysis, mapping all findings to severity levels from P0 to P3.

When should I use an automated code review instead of manual inspection?

You should use an automated code review when evaluating git changes, staged code, or commit ranges for architecture defects, unsafe removal candidates, and performance regressions. It ensures consistent evaluation before merging while waiting for explicit user confirmation.