code-review

Identify and remediate security, logic, and performance issues in code.

Updated Nov 7, 2025
One-click install
npx skills add https://github.com/phoenicisf/forex-analyzer --skill code-review-phoenicisf
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/phoenicisf/forex-analyzer/tree/main/.agents/skills/code-review
Command: npx skills add https://github.com/phoenicisf/forex-analyzer --skill code-review-phoenicisf

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Reviewing code for security vulnerabilities, business logic correctness, performance issues, and over-engineering to ensure high-quality, safe software before PRs and after AI-generated changes.

Core Features & Use Cases

  • OWASP Security Review: Identify injection, authentication/authorization gaps, sensitive data exposure, insecure deserialization, and CSRF.
  • Logic & Validation: Verify code aligns with requirements, handle edge cases, and ensure robust error states.
  • Performance & Maintainability: Detect N+1 queries, unnecessary allocations, and opportunities to simplify complex abstractions.
  • Remediation Guidance: Propose concrete fixes and improvements with rationale.

Quick Start

Review the attached diff or code changes and I will return actionable findings with severity and suggested fixes.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for OWASP vulnerabilities before a PR?

A code review for N+1 queries and unnecessary allocations detects performance issues and maintainability roadblocks in your diff. It identifies inefficient database interactions and complex abstractions, proposing concrete fixes to optimize application speed and simplify the codebase.

Can I validate business logic and error handling in a diff across different frameworks?

Yes, you can validate business logic and error handling across different languages and frameworks by reviewing your code changes. The review verifies alignment with requirements, handles edge cases, and ensures robust error states to prevent logic flaws from reaching production.

What is the best way to check AI-generated code for security and logic issues?

The best way to check AI-generated code for security and logic issues is to run a targeted code review on the generated changes. This enforces checks for OWASP vulnerabilities, correct business logic, and proper error handling to safely integrate automated code.

How do I detect over-engineering and performance issues like N+1 queries?

A code review for N+1 queries and unnecessary allocations detects performance issues and maintainability roadblocks in your diff. It identifies inefficient database interactions and complex abstractions, proposing concrete fixes to optimize application speed and simplify the codebase.

Does this code review tool provide concrete remediation for insecure deserialization and CSRF?

Yes, the code review provides concrete remediation for insecure deserialization and CSRF by proposing specific fixes with rationale. It identifies these OWASP vulnerabilities within your code changes and returns actionable findings to close security gaps effectively.