skills.rest
ilove323
ilove323COMMUNITY
Explore all skills by this author →
GitHub

code-review

Review code changes for security, performance, correctness, and maintainability.

1|Updated Mar 30, 2026
Search Tags:#performance#security#maintainability#code-quality#code-review#pull-request#n+1
One-click install
npx skills add https://github.com/ilove323/comlan-skills --skill code-review-ilove323
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/ilove323/comlan-skills/tree/main/engineering/skills/code-review
Command: npx skills add https://github.com/ilove323/comlan-skills --skill code-review-ilove323

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill accelerates and standardizes the review of code changes by identifying security vulnerabilities, performance regressions, correctness gaps, and maintainability issues before changes are merged.

Core Features & Use Cases

  • Structured reviews from PRs or diffs: Accepts pull request links, pasted diffs, or file paths and produces a prioritized list of findings.
  • Security and correctness checks: Scans for OWASP Top 10 patterns, SQL injection, XSS, CSRF, credential leaks, and missing error handling.
  • Performance and maintainability guidance: Detects N+1 queries, algorithmic complexity issues, missing indexes, resource leaks, naming and duplication problems, and suggests code-level fixes with examples.
  • Integrations when available: Automatically retrieves PR diffs, checks CI/test status, links findings to project trackers, and verifies changes against team coding guidelines if connectors are configured.
  • Use Case: Run before merging a release or hotfix PR to surface security risks, performance regressions, and missing tests.

Quick Start

Run the /code-review command with a pull request link or diff path to get a structured review that highlights security, performance, correctness, and maintainability recommendations.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a structured code review on a pull request?▼

Run a structured code review by providing a pull request link, pasted diff, or file path to receive a prioritized list of findings. The review automatically retrieves PR diffs, checks CI and test status, and surfaces actionable security, performance, and maintainability suggestions.

What security vulnerabilities can a code review detect in my diff?▼

A code review detects security vulnerabilities by scanning diffs for OWASP Top 10 patterns, SQL injection, XSS, CSRF, credential leaks, and missing error handling. It returns a prioritized list of actionable findings mapping to project trackers and team coding guidelines.

How do I find N+1 queries and performance regressions before merging?▼

Find N+1 queries and performance regressions by applying a structured review to your code changes before merging. The review detects algorithmic complexity issues, missing indexes, and resource leaks, then suggests code-level fixes with examples.

Does code review work with pasted diffs if source control is not connected?▼

Code review works with pasted diffs or file paths independently, but requires source control connectors to automatically retrieve PR diffs, check CI and test status, link findings to project trackers, and verify changes against team coding guidelines.

Can I check frontend and backend code for maintainability issues in the same review?▼

You can check both frontend and backend code for maintainability issues in the same review. The structured review detects naming and duplication problems across your codebase and provides actionable suggestions that map to project trackers and team coding guidelines.

What's the best way to surface missing tests in a release hotfix PR?▼

The best way to surface missing tests in a release hotfix PR is to run a structured code review on the pull request link. It checks CI and test status, identifies correctness gaps, and highlights security risks and performance regressions before changes are merged.

Related Skills

Explore More Software Engineering Skills→
mvillmowmvillmow
18

gh-review-pr

Review GitHub pull requests for quality, CI status, and standards compliance.

Community
Basic
fubirafubira
1

code-reviewer

Analyze code changes and output structured review feedback.

Community
Advanced
janjaszczakjanjaszczak

maintain-project-rules

Audit .cursor/rules/*.mdc files for prefix, frontmatter, and content conformance.

Community
Intermediate
AIDotNetAIDotNet
84

security-scanner

Unavailable for this prompt. Please try again or contact administrator. Alternatively, here's a suggestion:

Official
Intermediate