code-review

Analyzes Rails code quality and security via automated tools.

Updated Feb 8, 2026

Search Tags:#architecture #quality assurance #static analysis #code review #security audit #rails

Ready to run

npx skills add https://github.com/mlbright/notes --skill code-review-mlbright

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/mlbright/notes/tree/main/.github/skills/code-review
Command: npx skills add https://github.com/mlbright/notes --skill code-review-mlbright

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires rubocop, brakeman, bundler-audit, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive analysis of Rails code quality, architecture, and adherence to best practices, helping to identify potential issues before they become major problems.

Core Features & Use Cases

Static Analysis: Runs tools like RuboCop, Brakeman, and Bundler-Audit to catch common errors and vulnerabilities.
Architectural Audit: Evaluates code against SOLID principles and identifies common Rails anti-patterns.
Use Case: A developer can use this skill to get an automated review of a new feature's code, ensuring it meets quality standards and is free of security risks.

Quick Start

Use the code-review skill to analyze the quality of the code in the 'app/models' directory.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a security audit and static analysis on a Rails codebase?▼

A Rails code review checks code quality, architecture, and patterns using static analysis. It identifies SOLID principle violations, security vulnerabilities, performance bottlenecks, and common Rails anti-patterns.

How do I check my Rails application for SOLID principle violations and anti-patterns?▼

Checking Rails applications for SOLID principle violations and anti-patterns requires evaluating code against best practice guidelines. Static analysis tools identify architectural flaws and code quality issues before deployment.

Do I need RuboCop and Brakeman installed to analyze Rails code quality?▼

Yes, analyzing Rails code quality requires RuboCop, Brakeman, and Bundler-Audit installed in the environment. These dependencies execute static analysis, security audits, and vulnerability checks during the review process.

Can I scan a specific directory like app/models for Rails code quality issues?▼

Yes, you can scan specific directories like app/models for Rails code quality issues. The static analysis evaluates the targeted code against best practices to identify vulnerabilities and architectural problems.

What is the best way to identify performance bottlenecks and security vulnerabilities in Rails?▼

The best way to identify performance bottlenecks and security vulnerabilities in Rails is running integrated static analysis. Combining Brakeman and Bundler-Audit detects security risks while architectural audits find bottlenecks.