code-review

Review code changes for security, performance, and correctness issues.

Updated Apr 23, 2026
One-click install
npx skills add https://github.com/ngochuy13/intern-dev --skill code-review-ngochuy13
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/ngochuy13/intern-dev/tree/main/skills/code-review
Command: npx skills add https://github.com/ngochuy13/intern-dev --skill code-review-ngochuy13

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Code changes can introduce security vulnerabilities, performance regressions, or subtle correctness bugs that are hard to spot during busy development cycles.

Core Features & Use Cases

  • Security audit: Reviews for injection risks, authentication/authorization flaws, secrets leakage, and other common OWASP-style issues.
  • Performance checks: Flags likely N+1 query problems, inefficient algorithms, unbounded loops/queries, and potential resource leaks.
  • Correctness & maintainability: Examines edge cases, error handling gaps, race conditions, and code clarity with actionable guidance.

Quick Start

Use the command /code-review <PR URL or file path> and share the diff (or the files) you want reviewed before merging.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review PR diffs for security vulnerabilities and performance regressions?

To review PR diffs for security vulnerabilities and performance regressions, analyze the code changes to identify injection risks, authentication flaws, N+1 query problems, and error handling gaps, then generate actionable findings organized by severity and category.

What specific issues are covered in a code security audit and performance check?

A code security audit and performance check covers OWASP-style injection risks, secrets leakage, authentication flaws, unbounded loops, inefficient algorithms, resource leaks, and N+1 query problems to prevent security vulnerabilities and performance regressions.

How do I check code changes for correctness defects and maintainability issues?

Checking code changes for correctness defects and maintainability issues involves examining edge cases, race conditions, error handling gaps, and code clarity, producing structured assessments with actionable guidance to prevent subtle bugs from shipping.

Can I use automated code review on targeted file paths instead of full pull requests?

Yes, automated code review can be applied to targeted file paths as well as full PR diffs, providing a structured assessment of injection risks, N+1 queries, and edge cases wherever a detailed security and performance evaluation is needed.

What is the best way to prevent N+1 queries and secrets leakage before merging code?

The best way to prevent N+1 queries and secrets leakage before merging code is to run a structured review on the diff that flags performance regressions and security vulnerabilities, organizing findings by severity across Security, Performance, Correctness, and Maintainability dimensions.

Does automated code review work on unmerged pull request diffs?

Yes, automated code review works on unmerged pull request diffs by reviewing the proposed code changes to catch injection risks, correctness defects, and performance regressions before they ship, ensuring the final merge maintains security and quality standards.