skills.rest
iampawan
iampawanCOMMUNITY
Explore all skills by this author →
Website𝕏@imthepkGitHub

code-review

Automate pull request code reviews for security, correctness, performance, and maintainability.

3|Updated May 20, 2026
Search Tags:#code quality#code review#pull request#GitHub#PR analysis
One-click install
npx skills add https://github.com/iampawan/Manifest --skill code-review-iampawan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/iampawan/Manifest/tree/main/skills/code-review
Command: npx skills add https://github.com/iampawan/Manifest --skill code-review-iampawan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires github:pull_requests:write, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides detailed code reviews by analyzing pull request diffs for defects related to security, correctness, performance, and maintainability.

Core Features & Use Cases

  • Security Analysis: Detects security vulnerabilities like injection attacks and unauthorized access.
  • Correctness Validation: Checks for logical errors and missing code paths.
  • Performance Assessment: Identifies inefficient code and performance bottlenecks.
  • Maintainability Improvement: Suggests code refactoring for better readability and scalability.
  • Use Case: Use the /code-review command or the pr-verify.yml workflow to perform a comprehensive code review on pull requests in GitHub.

Quick Start

Execute the command '/code-review' or enable the pr-verify.yml workflow in your repository.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review for pull requests to check for security and correctness issues?▼

Automated code review analyzes pull request diffs for security vulnerabilities, logical errors, performance bottlenecks, and maintainability defects. Using the `/code-review` command or the `pr-verify.yml` workflow triggers comprehensive analysis across multiple programming languages.

What GitHub permissions are required to perform automated PR analysis?▼

Automated PR analysis requires the `github:pull_requests:write` scope to access and process pull request diffs. This GitHub permission allows the review workflow to read diff data and post comprehensive code-level analysis results.

Can I detect security vulnerabilities like injection attacks in my GitHub pull requests?▼

Security analysis detects vulnerabilities including injection attacks and unauthorized access within GitHub pull requests. The code review process examines PR diffs specifically for these security defects alongside correctness, performance, and maintainability issues.

Does automated code review support analyzing different programming languages in pull request diffs?▼

Automated code review supports various programming languages when analyzing pull request diffs. The tool processes PR data across multiple languages to identify defects related to security, correctness, performance bottlenecks, and maintainability improvements.

What's the best way to identify performance bottlenecks and maintainability issues in a pull request?▼

Performance assessment identifies inefficient code and bottlenecks, while maintainability analysis suggests refactoring for better readability and scalability. Running the `/code-review` command or enabling the `pr-verify.yml` workflow processes PR diffs for these specific defects.

How do I configure a GitHub workflow to automatically review pull requests for code quality?▼

Enable the `pr-verify.yml` workflow in your repository to automatically trigger comprehensive code reviews on pull requests. This workflow processes PR diffs for security, correctness, performance, and maintainability defects without manual command execution.

Related Skills

Explore More Software Engineering Skills→
ersinkocersinkoc
56

sc-diff-report

Scan changed files to classify and report security vulnerabilities during code reviews.

Community
Intermediate
avifeneshavifenesh
376

code-review

Identify and report code quality, security, and maintainability issues in code submissions.

Community
Intermediate
constzzconstzz

golang-continuous-integration

Automate Golang CI/CD pipeline setup with GitHub Actions.

Community
Advanced
AIBiz-AutomatyzacjeAIBiz-Automatyzacje
70

code-review

Automate React code review with static analysis and pattern detection.

Community
Advanced