code-review

Analyze code changes for quality, security, and testing issues with severity ratings.

6|1|Updated Dec 30, 2025

Search Tags:#testing #security #quality #static-analysis #code-review #pull-request

Ready to run

npx skills add https://github.com/ferdiangunawan/rpi-stack --skill code-review-ferdiangunawan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/ferdiangunawan/rpi-stack/tree/main/code-review
Command: npx skills add https://github.com/ferdiangunawan/rpi-stack --skill code-review-ferdiangunawan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Code Review Skill helps teams identify correctness issues, security risks, and quality gaps before code merges, reducing bugs and vulnerabilities in production.

Core Features & Use Cases

Comprehensive correctness checks, security and data handling reviews, and maintainability assessments.
Use Case: when reviewing a PR, the skill analyzes changes, recommends mitigations, and generates a prioritized action list with P0/P1/P2 severity.
Pattern guidance: aligns with AGENTS.md guidelines for pattern compliance and reporting.

Quick Start

Review the latest merged diff for a PR titled "Code Review" and generate a structured report.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I review a pull request for security and correctness issues?▼

To review a pull request for security and correctness, analyze the code changes to identify quality issues, security gaps, and testing weaknesses, generating a structured report with P0/P1/P2 severity ratings and recommended fixes.

Can I generate a prioritized action list from a commit diff?▼

Yes, you can generate a prioritized action list from a commit diff by assessing the staged changes for correctness, security, reliability, and maintainability, producing structured findings with severity ratings and mitigations.

What is static analysis for code quality and how does it handle severity ratings?▼

Static analysis for code quality identifies maintainability and security gaps in a codebase, assigning severity ratings like P0, P1, or P2 to findings to help teams prioritize recommended fixes before merging code.

Does the code review process work across different programming languages and frameworks?▼

Yes, the code review process works across languages and frameworks by applying correctness checks, security reviews, and maintainability assessments to pull requests, commits, and staged changes universally.

How do I align code review findings with AGENTS.md guidelines?▼

To align code review findings with AGENTS.md guidelines, apply the specified pattern compliance and structured reporting mechanisms when analyzing code changes, ensuring the output matches the expected development workflow patterns.

What's the best way to check a codebase for testing weaknesses before merging?▼

The best way to check a codebase for testing weaknesses is to analyze pull requests or commits for reliability gaps, generating a structured report with actionable findings and severity-rated recommended fixes.