code-review

Review pull requests for logic bugs, security flaws, and test coverage gaps.

18|1|Updated Apr 17, 2026
One-click install
npx skills add https://github.com/kid-sid/codex-spellbook --skill code-review-kid-sid
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/kid-sid/codex-spellbook/tree/main/skills/code-review
Command: npx skills add https://github.com/kid-sid/codex-spellbook --skill code-review-kid-sid

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manual pull request reviews often miss critical logic bugs, security vulnerabilities, missing test coverage, and API contract breaks, leading to production incidents and accumulated technical debt.

Core Features & Use Cases

  • Structured Review Workflow: Prioritizes checks from core logic correctness down to style and cleanup, separating blocking issues from optional suggestions.
  • Comprehensive Issue Detection: Catches security flaws, test coverage gaps, performance regressions, API contract drift, and unsafe migration risks.
  • Actionable Feedback: Provides clear, file-scoped comments with concrete fix paths, avoiding vague nitpicks and unhelpful criticism. Use case: When reviewing a payment processing PR, this skill guides you to flag missing timeout retry logic that could drop transactions, and suggest adding test coverage for the network failure edge case.

Quick Start

Use the code-review skill to review the attached pull request for security issues, missing tests, and logic bugs.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I catch logic bugs and security flaws in a pull request review?

To catch logic bugs and security flaws during pull request review, apply a structured workflow that prioritizes core logic correctness and flags vulnerabilities, separating blocking issues from optional suggestions.

What is the best way to review API contract changes for breaks?

Reviewing API contract changes involves checking for drift and ensuring consistency. A structured review process detects contract breaks and performance regressions while providing file-scoped comments with concrete fix paths.

How do I ensure my code review covers missing test coverage?

To ensure code review covers missing test coverage, apply a comprehensive detection process that identifies test gaps and unsafe migration risks, providing actionable feedback with clear blocking labels.

Can I use automated code review for security-sensitive code inspections?

Yes, you can use structured code review for security-sensitive code inspections. It eliminates inconsistent manual reviews by applying prioritized checks that catch vulnerabilities and provide specific fix guidance.

Does this code review approach work for migration audits?

This code review approach works for migration audits by identifying unsafe migration risks and validating logic correctness, ensuring the migration process does not introduce production incidents or technical debt.