What problem does it solve?
Manual, unstructured code reviews often miss critical security vulnerabilities, performance bottlenecks, and maintainability issues, leading to buggy, insecure code and accumulating technical debt that slows down development velocity.
Core Features & Use Cases
- Structured 15-Phase Workflow: A end-to-end review process covering environment setup, context understanding, security checks, performance analysis, code quality validation, error handling review, testing assessment, maintainability evaluation, project convention compliance, git workflow checks, documentation review, constructive feedback delivery, common issue detection, automated tooling integration, and pre-approval checklists.
- Security-First Review: Built-in OWASP Top 10 checks, SQL injection and command injection detection, hardcoded secret scanning, and sensitive data exposure validation to catch security flaws before they reach production.
- Use Case: A development team can use this Skill to standardize pull request reviews across all contributors, ensuring every code change is evaluated for security risks, performance efficiency, and adherence to team coding standards before merging.
Quick Start
Use the code-review skill to conduct a full structured review of the latest pull request in your current repository, following the guided workflow to identify security, performance, and quality issues.