skills.rest
pmkshar
pmksharCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

code-review-pro

Identify security vulnerabilities, performance bottlenecks, and code quality issues in codebases.

Updated Aug 23, 2026
Search Tags:#code quality#code review#security audit#performance analysis#bug detection
One-click install
npx skills add https://github.com/pmkshar/marqaiskills --skill code-review-pro-pmkshar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review-pro
Source: https://github.com/pmkshar/marqaiskills/tree/main/code-review-pro
Command: npx skills add https://github.com/pmkshar/marqaiskills --skill code-review-pro-pmkshar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill provides a comprehensive code review to identify security vulnerabilities, performance bottlenecks, and refactoring opportunities, making it ideal for thorough code audits and security assessments.

Core Features & Use Cases

  • Security Analysis: Identifies SQL injection, XSS, authentication/authorization issues, and more.
  • Performance Analysis: Detects N+1 query problems, inefficient algorithms, memory leaks, and more.
  • Code Quality: Evaluates code duplication, function length, cyclomatic complexity, and more.
  • Best Practices: Reviews language idioms, framework conventions, SOLID principles, and more.
  • Bug and Edge Case Analysis: Finds logic errors, off-by-one errors, race conditions, and more.
  • Actionable Fixes: Provides specific code changes, explanations, and before/after examples.
  • Use Case: For developers and security engineers who need a thorough review of their codebase to ensure it meets high standards.

Quick Start

Run a security audit on your codebase using the code-review-pro skill.

Frequently Asked Questions about code-review-pro

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on my codebase to find vulnerabilities?▼

A static code analysis audit scans your codebase to identify security vulnerabilities like SQL injection and XSS without manual review. It evaluates code quality and provides actionable fixes with before and after examples.

Can static code analysis detect performance bottlenecks like N+1 query problems?▼

Yes, static code analysis can detect performance bottlenecks like N+1 query problems. It scans your codebase to identify inefficient algorithms and memory leaks, providing specific code changes to optimize performance.

How do I check my codebase for code quality issues and cyclomatic complexity?▼

Checking code quality involves evaluating function length, code duplication, and cyclomatic complexity. Static analysis tools review your codebase against best practices like SOLID principles and framework conventions to ensure maintainability.

What is the best way to find logic errors and race conditions in source code?▼

The best way to find logic errors and race conditions is a comprehensive code review using static analysis. It detects edge case errors automatically, ensuring thorough bug detection across the software codebase.

Does code review automation work for evaluating framework conventions and language idioms?▼

Yes, code review automation works for evaluating framework conventions and language idioms. It analyzes your codebase against best practices and SOLID principles to ensure the code meets high maintainability standards.

Can I get specific actionable fixes for security vulnerabilities and code quality issues?▼

Yes, you can get specific actionable fixes for security vulnerabilities and code quality issues. The analysis provides specific code changes, detailed explanations, and before/after examples to resolve detected problems.

Related Skills

Explore More Software Engineering Skills→
vamseeachantavamseeachanta
14

analyst

Analyze codebases and generate structured quality-review reports with prioritized recommendations.

Community
Advanced
mikanfactorymikanfactory

review-backend-go

Analyze Go backend code changes for best practices, security, performance, and database issues.

Community
Advanced
Arnutt-NArnutt-N

security-scanner

Detect OWASP Top 10 risks and misconfigurations in HR-IMS code.

Community
Advanced
andrescardonas7andrescardonas7

constant-time-testing

Detect timing side-channel vulnerabilities in cryptographic implementations.

Community
Advanced