code-review

Perform systematic code review and static analysis across multiple programming languages.

7|2|Updated Jan 28, 2026

Search Tags:#quality assurance #static analysis #code review #performance #security #devsecops

Ready to run

npx skills add https://github.com/LuisSambrano/antigravity-config --skill code-review-luissambrano

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/LuisSambrano/antigravity-config/tree/main/skills/1-core/code-review
Command: npx skills add https://github.com/LuisSambrano/antigravity-config --skill code-review-luissambrano

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for rigorous code quality assurance, security vulnerability detection, and adherence to architectural best practices, ensuring production-ready software.

Core Features & Use Cases

Automated Static Analysis: Integrates with tools like SonarQube, CodeQL, and Semgrep for comprehensive code scanning.
Security Auditing: Focuses on OWASP Top 10 vulnerabilities, input validation, and secure authentication patterns.
Performance Optimization: Analyzes for memory leaks, inefficient queries, and scalability bottlenecks.
Use Case: Before merging a critical feature, use this Skill to perform a full security and performance audit, identifying potential risks and suggesting optimizations to prevent production incidents.

Quick Start

Use the code-review skill to analyze the attached pull request for security vulnerabilities and performance bottlenecks.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security audit on a pull request before merging?▼

Static analysis validates vulnerability thresholds against OWASP Top 10 standards, input validation, and secure authentication patterns to ensure production reliability before merging a pull request.

What is static analysis for code quality assurance?▼

Static analysis for code quality assurance systematically scans source code to detect security vulnerabilities, architectural deviations, and performance bottlenecks across multiple programming languages.

How do I detect memory leaks and scalability bottlenecks in my codebase?▼

Performance optimization analysis evaluates code execution paths, inefficient queries, and resource allocation patterns to identify memory leaks and scalability bottlenecks.

Does code review work with SonarQube, CodeQL, and Semgrep for DevSecOps?▼

Code review integrates with SonarQube, CodeQL, and Semgrep for DevSecOps, applying CI/CD security constraints and automated scanning to enforce modern development practices.

Can I validate architectural patterns and vulnerability thresholds across multiple programming languages?▼

Yes, you can validate architectural patterns and vulnerability thresholds across multiple programming languages through systematic code review that enforces modern development practices and CI/CD security constraints.

Why should I not use automated code review for certain tasks?▼

You should not rely solely on automated code review when integration with AI review tools, static analysis platforms, or security scanners is unavailable, as manual validation is required for complex architectural decisions.