skills.rest
LuisSambrano
LuisSambranoCOMMUNITY
Explore all skills by this author →
𝕏@luissambrano_uxGitHub

code-review

Perform systematic code review and static analysis across multiple programming languages.

7|2|Updated Jan 28, 2026
Search Tags:#quality assurance#static analysis#code review#performance#security#devsecops
One-click install
npx skills add https://github.com/LuisSambrano/antigravity-config --skill code-review-luissambrano
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/LuisSambrano/antigravity-config/tree/main/skills/1-core/code-review
Command: npx skills add https://github.com/LuisSambrano/antigravity-config --skill code-review-luissambrano

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for rigorous code quality assurance, security vulnerability detection, and adherence to architectural best practices, ensuring production-ready software.

Core Features & Use Cases

  • Automated Static Analysis: Integrates with tools like SonarQube, CodeQL, and Semgrep for comprehensive code scanning.
  • Security Auditing: Focuses on OWASP Top 10 vulnerabilities, input validation, and secure authentication patterns.
  • Performance Optimization: Analyzes for memory leaks, inefficient queries, and scalability bottlenecks.
  • Use Case: Before merging a critical feature, use this Skill to perform a full security and performance audit, identifying potential risks and suggesting optimizations to prevent production incidents.

Quick Start

Use the code-review skill to analyze the attached pull request for security vulnerabilities and performance bottlenecks.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on a pull request before merging?▼

Static analysis validates vulnerability thresholds against OWASP Top 10 standards, input validation, and secure authentication patterns to ensure production reliability before merging a pull request.

What is static analysis for code quality assurance?▼

Static analysis for code quality assurance systematically scans source code to detect security vulnerabilities, architectural deviations, and performance bottlenecks across multiple programming languages.

How do I detect memory leaks and scalability bottlenecks in my codebase?▼

Performance optimization analysis evaluates code execution paths, inefficient queries, and resource allocation patterns to identify memory leaks and scalability bottlenecks.

Does code review work with SonarQube, CodeQL, and Semgrep for DevSecOps?▼

Code review integrates with SonarQube, CodeQL, and Semgrep for DevSecOps, applying CI/CD security constraints and automated scanning to enforce modern development practices.

Can I validate architectural patterns and vulnerability thresholds across multiple programming languages?▼

Yes, you can validate architectural patterns and vulnerability thresholds across multiple programming languages through systematic code review that enforces modern development practices and CI/CD security constraints.

Why should I not use automated code review for certain tasks?▼

You should not rely solely on automated code review when integration with AI review tools, static analysis platforms, or security scanners is unavailable, as manual validation is required for complex architectural decisions.

Related Skills

Explore More Software Engineering Skills→
nubivnubiv

springboot-verification

Automate build, static analysis, tests, and security scans for Spring Boot projects.

Community
Advanced
buiminhduc23011buiminhduc23011

awf-audit

Audit software projects for security, performance, and code quality issues.

Community
Advanced
IndustrialIndustrial

code-reviewer

Analyze code for security vulnerabilities and performance issues.

Community
Advanced
Arnutt-NArnutt-N

security-scanner

Detect OWASP Top 10 risks and misconfigurations in HR-IMS code.

Community
Advanced