code-review

Automate code reviews with severity-rated feedback on security and quality.

Updated May 26, 2026
One-click install
npx skills add https://github.com/koasis89/ite-ai-agent --skill code-review-koasis89
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/koasis89/ite-ai-agent/tree/main/plugins/oh-my-codex/skills/code-review
Command: npx skills add https://github.com/koasis89/ite-ai-agent --skill code-review-koasis89

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires git, OWASP ZAP, PMD, Checkstyle, JSHint, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates comprehensive code reviews, providing severity-rated feedback on quality, security, and maintainability.

Core Features & Use Cases

  • Automated Code Review: Conducts thorough code reviews with checks for security vulnerabilities, code quality, performance, and maintainability.
  • Parallel Review Lanes: Utilizes parallel review lanes for code review and architecture analysis.
  • Severity Rating: Offers severity ratings for issues, including CRITICAL, HIGH, MEDIUM, and LOW.
  • Use Case: Before merging a pull request or after implementing a major feature, use this Skill to ensure code quality and security.

Quick Start

Run a code review for the latest changes in the 'main' branch using the 'code-review' skill.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review for security vulnerabilities and maintainability?

You can automate code review for security vulnerabilities and maintainability using this Skill, which runs parallel review lanes for code and architecture analysis to deliver severity-rated feedback on detected issues.

What tools are required for automated code quality and security checks?

Automated code quality and security checks require git for version control integration, along with analysis tools like OWASP ZAP, PMD, Checkstyle, and JSHint to scan for vulnerabilities and maintainability issues.

Can I use Checkstyle and PMD for parallel code and architecture analysis?

Yes, you can use Checkstyle and PMD within this Skill's parallel review lanes to conduct simultaneous code and architecture analysis, generating severity-rated feedback for quality and maintainability improvements.

When do I need to run a comprehensive code review before merging a pull request?

Running a comprehensive code review before merging a pull request ensures code quality and security by identifying vulnerabilities and maintainability issues, providing severity ratings to prioritize critical fixes before integration.

Does OWASP ZAP work with this automated code review process for security scanning?

OWASP ZAP is a required dependency for this automated code review process, functioning as the security scanning component to detect vulnerabilities and assign severity ratings during the parallel review analysis.

What is the best way to rate the severity of code quality issues in a CI pipeline?

The best way to rate the severity of code quality issues in a CI pipeline is using this Skill's feedback mechanism, which categorizes detected vulnerabilities and maintainability flaws into CRITICAL, HIGH, MEDIUM, and LOW severity levels.