code-review-expert

Review current git changes for SOLID violations, security risks, and performance issues.

3|1|Updated Oct 27, 2012
One-click install
npx skills add https://github.com/gunyarakun/dotfiles --skill code-review-expert-gunyarakun
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-expert
Source: https://github.com/gunyarakun/dotfiles/tree/main/claude/skills/code-review-expert
Command: npx skills add https://github.com/gunyarakun/dotfiles --skill code-review-expert-gunyarakun

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill automates the process of code review, providing structured feedback on architecture, security, performance, and code quality to save time and reduce errors.

Core Features & Use Cases

  • SOLID Principle Detection: Identifies violations of SOLID principles (SRP, OCP, LSP, ISP, DIP).
  • Security Scan: Checks for XSS, injection, SSRF, race conditions, auth gaps, secrets leakage.
  • Performance Analysis: Detects N+1 queries, CPU hotspots, missing cache, memory issues.
  • Error Handling Review: Analyzes swallowed exceptions, async errors, missing boundaries.
  • Boundary Conditions: Flags null handling, empty collections, off-by-one errors, numeric limits.
  • Removal Planning: Identifies dead code with safe deletion plans.
  • Usage: After installation, use the command /code-review-expert to review your current git changes.

Quick Start

Run /code-review-expert to start a code review on your current git changes.

Frequently Asked Questions about code-review-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically review my git changes for SOLID principle violations?

To automatically review git changes for SOLID principle violations, run the /code-review-expert command to scan current diffs and identify SRP, OCP, LSP, ISP, and DIP infractions. It uses YAML configuration to define severity levels and workflow steps for the analysis.

What is the best way to scan code for security risks like XSS and SSRF before committing?

Scanning code for security risks like XSS, injection, SSRF, race conditions, auth gaps, and secrets leakage is handled by the automated security scan. Running /code-review-expert checks current git changes and reports these vulnerabilities based on configured severity levels.

How do I detect performance issues such as N+1 queries and CPU hotspots in my code?

Detecting performance issues like N+1 queries, CPU hotspots, missing cache, and memory issues is done through performance analysis. Execute /code-review-expert to analyze your current git changes and flag these specific performance bottlenecks automatically.

Can I use code review automation to find dead code and plan safe deletion?

Yes, code review automation can find dead code and generate safe deletion plans. The /code-review-expert command identifies unused code segments within your current git changes and provides structured removal planning to prevent regressions.

Does the automated code review check for boundary conditions and error handling gaps?

Automated code review does check boundary conditions and error handling gaps. It flags null handling, empty collections, off-by-one errors, numeric limits, swallowed exceptions, async errors, and missing boundaries within your current git changes.

How do I configure severity levels for my automated code quality checks?

Configure severity levels for code quality checks by modifying the YAML configuration file. This file defines the workflow steps and severity thresholds applied when /code-review-expert analyzes your current git changes for architecture, security, and quality concerns.