code-review

Review code changes for correctness, security, and quality issues.

44|9|Updated May 7, 2026
One-click install
npx skills add https://github.com/Omar-Obando/qwen-orchestrator --skill code-review-omar-obando
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/Omar-Obando/qwen-orchestrator/tree/main/skills/code-review
Command: npx skills add https://github.com/Omar-Obando/qwen-orchestrator --skill code-review-omar-obando

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps you catch correctness, security, and quality issues before they ship by providing a structured, evidence-based code review process aligned with OWASP, SOLID, and Clean Code principles.

Core Features & Use Cases

  • Correctness auditing: Validate edge cases, null/undefined handling, and error-condition behavior.
  • Security-focused review: Check injection risks, authorization, secret leakage, input validation, and dependency vulnerabilities.
  • Quality assessment: Evaluate performance hotspots, maintainability constraints, testing completeness, and architecture boundaries.
  • Common use cases: Pull request reviews, security-oriented quality checks, team coding standards enforcement, and pre-merge risk reduction.

Quick Start

Use the code-review skill to review the changes in your pull request and produce a severity-classified report with evidence and recommendations.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on a pull request?

Perform a pull request security audit by checking injection risks, authorization, secret leakage, and input validation against an OWASP-aligned checklist to produce a severity-classified markdown report with actionable recommendations.

What is the best way to enforce clean code and SOLID principles during code reviews?

Enforce clean code and SOLID principles by evaluating maintainability constraints and architecture boundaries to identify quality issues, yielding an evidence-based markdown report that ensures code changes meet team standards.

How do I check code correctness and handle edge cases before merging?

Check code correctness by validating edge cases, null handling, and error-condition behavior to identify correctness issues, yielding a severity-classified report with evidence that reduces pre-merge risk.

Does this code review process work for team coding standard enforcement?

Yes, this code review process works for team coding standard enforcement by applying a structured OWASP, SOLID, and Clean Code aligned checklist to identify maintainability and architecture issues across application source code.

What are the limitations of automated code review for security vulnerabilities?

Limitations of automated code review for security vulnerabilities include reliance on an OWASP-aligned checklist to identify injection risks and dependency vulnerabilities, yielding a markdown report that may require manual analysis for complex architecture boundaries.