skills.rest
kozyszoo
kozyszooCOMMUNITY
Explore all skills by this author →
GitHub

code-review

Review code files for security vulnerabilities and quality issues.

1|Updated Mar 3, 2026
Search Tags:#developer tools#quality assurance#code review#code analysis#security#vulnerability detection
One-click install
npx skills add https://github.com/kozyszoo/antigravity-handson --skill code-review-kozyszoo
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/kozyszoo/antigravity-handson/tree/main/handson/03_2_skills/.agent/skills/code-review
Command: npx skills add https://github.com/kozyszoo/antigravity-handson --skill code-review-kozyszoo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of reviewing code for quality and security vulnerabilities, ensuring higher standards and reducing manual effort.

Core Features & Use Cases

  • Security Scanning: Detects common vulnerabilities like SQL injection and XSS.
  • Code Quality Checks: Assesses variable naming, function length, and comment usage.
  • Improvement Suggestions: Provides actionable recommendations for code enhancement.
  • Use Case: Integrate this skill into your CI/CD pipeline to automatically flag potential issues in new code commits before they are merged.

Quick Start

Run the code-review skill on the file 'main.py' to check its quality and security.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review to detect security vulnerabilities like SQL injection and XSS?▼

Automated code review detects vulnerabilities like SQL injection and XSS by scanning specified files for hardcoded credentials and security flaws, providing structured improvement suggestions to reduce manual effort.

What is the best way to check code quality for poor variable naming and insufficient comments?▼

Checking code quality involves assessing variable naming, function length, and comment usage to identify issues, providing actionable recommendations for code enhancement and ensuring higher standards across your files.

Can I integrate automated code analysis into my CI/CD pipeline to flag issues in new commits?▼

You can integrate automated code analysis into your CI/CD pipeline to automatically flag potential security and quality issues in new code commits before they are merged, ensuring higher standards.

Does automated vulnerability detection work on specific files like a main Python script?▼

Automated vulnerability detection works on specified files such as a main Python script, scanning them to identify hardcoded credentials, security vulnerabilities, and code quality problems with structured suggestions.

Why does automated code scanning focus on hardcoded credentials and function length?▼

Automated code scanning focuses on hardcoded credentials and function length to prevent security breaches and maintain readability, assessing these specific metrics to provide actionable code enhancement recommendations.

Related Skills

Explore More Software Engineering Skills→
camoneartcamoneart
5

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection in CI/CD pipelines.

Community
Advanced
GuicedEEGuicedEE
5

code-reviewer

Generate structured markdown code-review reports from git diffs.

Official
Advanced
AytsuuAytsuu

repo-scan

Audit source code files, detect third-party libraries, and generate four-level module verdicts.

Community
Advanced
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced