code-review

Review pull requests for security, performance, and code quality issues.

1|Updated May 5, 2026
One-click install
npx skills add https://github.com/kollaborai/kollab --skill code-review-kollaborai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/kollaborai/kollab/tree/main/bundles/skills/code-review
Command: npx skills add https://github.com/kollaborai/kollab --skill code-review-kollaborai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manual, unstructured code reviews often miss critical security vulnerabilities, performance bottlenecks, and maintainability issues, leading to buggy, insecure code and accumulating technical debt that slows down development velocity.

Core Features & Use Cases

  • Structured 15-Phase Workflow: A end-to-end review process covering environment setup, context understanding, security checks, performance analysis, code quality validation, error handling review, testing assessment, maintainability evaluation, project convention compliance, git workflow checks, documentation review, constructive feedback delivery, common issue detection, automated tooling integration, and pre-approval checklists.
  • Security-First Review: Built-in OWASP Top 10 checks, SQL injection and command injection detection, hardcoded secret scanning, and sensitive data exposure validation to catch security flaws before they reach production.
  • Use Case: A development team can use this Skill to standardize pull request reviews across all contributors, ensuring every code change is evaluated for security risks, performance efficiency, and adherence to team coding standards before merging.

Quick Start

Use the code-review skill to conduct a full structured review of the latest pull request in your current repository, following the guided workflow to identify security, performance, and quality issues.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a structured code review for a pull request?

A structured code review for a pull request uses a 15-phase workflow to analyze diffs, covering environment setup, context understanding, security checks, performance analysis, and code quality validation to ensure comprehensive feedback.

Can code review workflows detect OWASP Top 10 security vulnerabilities?

Yes, code review workflows can detect OWASP Top 10 security vulnerabilities through built-in checks for SQL injection, command injection, hardcoded secret scanning, and sensitive data exposure validation before code changes reach production.

Does the code review process support Python and web codebases?

The code review process supports Python, web, and general-purpose codebases, applying diff analysis, algorithmic complexity checks, and style compliance validation to standardize pull request reviews across development teams.

What is the best way to check for performance bottlenecks during a git workflow?

The best way to check for performance bottlenecks during a git workflow is applying algorithmic complexity checks and performance analysis as part of a structured pull request review to identify maintainability defects.

How do I standardize pull request reviews to prevent technical debt?

Standardize pull request reviews by applying a guided workflow that evaluates error handling, test coverage, project convention compliance, and maintainability, ensuring every code change is assessed for security risks and quality.

What does an end-to-end code review process include for detecting security flaws?

An end-to-end code review process includes environment verification, context assessment, security auditing, error handling validation, test coverage review, and constructive feedback delivery to catch security flaws and quality issues.