code-review

Identify security vulnerabilities and code quality issues in code changes.

Updated Apr 1, 2026
One-click install
npx skills add https://github.com/founderphantom/zola-agent --skill code-review-founderphantom
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/founderphantom/zola-agent/tree/main/skills/software-development/code-review
Command: npx skills add https://github.com/founderphantom/zola-agent --skill code-review-founderphantom

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps reviewers identify security vulnerabilities, maintainability issues, and quality gaps during code reviews to improve software reliability and safety.

Core Features & Use Cases

  • Security & quality checklist: Enforces security-first checks (no hardcoded secrets, input validation, parameterized queries, path traversal prevention, and proper auth checks) and quality standards (error handling, clear responsibilities, and documentation).
  • Structured feedback format: Uses the predefined Review Response Format with actionable issues, severity, and remediation guidance.
  • Practical patterns & best practices: Includes common patterns to flag (e.g., avoiding code smells, DRY violations, and insecure patterns) and tone guidelines for constructive feedback.

Quick Start

Review a code change by applying the checklist and returning feedback in the prescribed format.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities and code quality issues in a pull request?

To identify security vulnerabilities and code quality issues in a pull request, apply a security-first checklist covering hardcoded secrets, input validation, parameterized queries, and path traversal prevention. Produce structured feedback with actionable issue descriptions, severity levels, and suggested fixes.

What is the best way to review large code rewrites and legacy code audits?

Reviewing large code rewrites and legacy code audits requires applying a comprehensive review checklist to scenarios with extensive changes. This process flags maintainability concerns, DRY violations, and insecure patterns while providing constructive, structured remediation guidance for improved software reliability.

How do I enforce best practices and maintainability standards during a code review?

Enforcing best practices and maintainability standards during a code review involves checking for proper error handling, clear module responsibilities, and adequate documentation. It also flags code smells and DRY violations to ensure long-term software reliability and safety.

How do I format code review feedback to be constructive and actionable?

Formatting code review feedback to be constructive and actionable requires using a predefined Review Response Format. This structure ensures each issue includes a clear description, severity rating, and suggested fixes, following established tone guidelines for constructive developer feedback.

Does code review work for small patches or only for large code changes?

Code review works effectively for both small patches and large code changes. The applied review checklist scales to handle various scenarios, from minor modifications to massive rewrites, systematically identifying security vulnerabilities and quality gaps across different change sizes.