code-review

Review Python and JavaScript code for security vulnerabilities and quality issues.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/kwasi-cpu/hermes-agent --skill code-review-kwasi-cpu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/kwasi-cpu/hermes-agent/tree/main/skills/software-development/code-review
Command: npx skills add https://github.com/kwasi-cpu/hermes-agent --skill code-review-kwasi-cpu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a structured approach to reviewing code, ensuring higher quality, better security, and adherence to best practices, thereby reducing bugs and vulnerabilities.

Core Features & Use Cases

  • Security Auditing: Checks for hardcoded secrets, input validation, and secure data handling.
  • Quality Assurance: Enforces code readability, modularity, and maintainability.
  • Bug Prevention: Identifies potential errors in logic, error handling, and testing considerations.
  • Use Case: When a developer submits a pull request, use this Skill to guide the review process, ensuring all critical aspects of the code are examined before merging.

Quick Start

Use the code-review skill to review the attached code snippet for security and quality issues.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What should a code review checklist include to prevent security vulnerabilities?

A thorough code review checklist should include checks for hardcoded secrets, input validation, SQL injection, and path traversal. Reviewing for these common vulnerabilities ensures secure data handling and reduces potential security flaws before merging code.

How do I review Python and JavaScript code for common security issues and quality?

To review Python and JavaScript code, analyze snippets for problematic patterns, logic errors, and maintainability. Apply structured guidelines to enforce modularity, secure data handling, and proper error handling to ensure overall code quality.

Can I use a structured format for providing feedback during a pull request code review?

Yes, you can use structured feedback formats to guide the code review process. Providing feedback systematically ensures all critical aspects, including testing considerations and best practices, are clearly communicated to the developer before a pull request is merged.

How do you identify hardcoded secrets and input validation issues when auditing code?

To identify hardcoded secrets and input validation issues, audit the code against established security guidelines. Check that data handling processes validate inputs correctly and ensure no sensitive credentials are embedded directly within the source code.

What is the best way to enforce code readability and modularity during a code review?

The best way to enforce code readability and modularity is to apply quality assurance guidelines during the review. Check the code against best practices for maintainability and logic structure to prevent bugs and ensure long-term project quality.