code-review

Review code diffs and snippets for evidence-based issues across correctness, security, and performance.

Updated May 6, 2026
One-click install
npx skills add https://github.com/korwlik23/skills --skill code-review-korwlik23
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/korwlik23/skills/tree/main/v3-eng/code-review
Command: npx skills add https://github.com/korwlik23/skills --skill code-review-korwlik23

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Code review helps you identify bugs, security risks, performance problems, and maintainability issues in code by reporting only what is supported by the provided context.

Core Features & Use Cases

  • Evidence-based findings: Reports issues only when they can be proven from code, diffs, configuration, logs, schemas, contracts, tests, or documentation that are actually present.
  • Structured risk coverage: Reviews logical correctness, naming, design quality, error handling, performance, security, data integrity, API design, accessibility, and observability/operations.
  • Actionable remediation: For each finding, includes severity, category, location (when known), impact, evidence, and fix guidance (with alternatives when appropriate).

Quick Start

Use this skill when you paste a diff or code snippet and want a rigorous review of risks and concrete fixes.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an evidence-based code review on a pull request diff?

Perform an evidence-based code review by submitting your pull request diff or snippet for analysis. The tool evaluates correctness, security, performance, and API design, outputting structured findings with severity, impact, and fix guidance based solely on provided evidence.

What is evidence-based code review and how does it avoid false positives?

Evidence-based code review identifies bugs and maintainability issues by strictly validating them against provided diffs, schemas, logs, or tests. It avoids speculation by reporting only risks provable from the actual context.

Can I use code review to analyze database schemas and infrastructure configurations?

Yes, you can use code review to analyze database schemas and infrastructure configurations. It assesses data integrity, security, and performance across backend, frontend, database, and infrastructure surfaces.

Does code review provide actionable remediation steps for detected security risks?

Yes, code review provides actionable remediation for security risks. Each finding includes severity, category, location, impact, and concrete fix guidance, offering alternatives when appropriate to resolve the issue.

What's the best way to review API design quality and logical correctness in a refactor?

The best way to review API design quality and logical correctness during a refactor is to submit the code for structured risk coverage. It evaluates naming, design quality, and error handling, providing evidence-backed fix guidance.

What are the limitations of code review when analyzing isolated code snippets?

A limitation of code review on isolated snippets is that findings require supporting evidence from the code, logs, or schemas. It strictly avoids speculation, meaning it will not report issues lacking contextual proof.