code-review

Review Python, Kubernetes, and AWS code for security and quality issues.

2|Updated Jun 29, 2021
One-click install
npx skills add https://github.com/pypeaday/dotfiles --skill code-review-pypeaday
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/pypeaday/dotfiles/tree/main/opencode/.config/opencode/skill/code-review
Command: npx skills add https://github.com/pypeaday/dotfiles --skill code-review-pypeaday

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured approach to reviewing Python code, Kubernetes configurations, and AWS policies to identify security gaps, architectural flaws, and maintainability issues.

Core Features & Use Cases

  • Threat-focused review: Detect security vulnerabilities in Python apps, Kubernetes manifests, and AWS IAM policies.
  • Quality checks: Identify anti-patterns, performance bottlenecks, and unnecessary complexity.
  • Use Case: During PR reviews, run this Skill to audit code for secrets leakage, misconfigurations, and hard-to-maintain patterns.

Quick Start

Run the code-review skill on a repository to surface Python, Kubernetes, and AWS issues.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security reviews for Python, Kubernetes, and AWS code?

Automate security reviews for Python, Kubernetes, and AWS by running static analysis to detect misconfigurations, secrets leakage, and architectural risks in your pull requests. This skill audits IAM policies, manifests, and application code for threats.

What is the best way to check Kubernetes manifests for security misconfigurations?

Checking Kubernetes manifests for security misconfigurations involves applying static analysis and best-practice guidelines to identify architectural flaws and threat vulnerabilities during your code review process.

Can I use static analysis to detect secrets leakage in Python pull requests?

You can use static analysis to detect secrets leakage in Python pull requests by auditing the code for security gaps, anti-patterns, and hard-to-maintain structures before merging changes.

Does this code review process work for AWS IAM policies and Python apps?

This code review process works for AWS IAM policies and Python apps by applying ruthless review guidelines to identify security vulnerabilities, performance bottlenecks, and unnecessary complexity across your infrastructure.

When do I need an automated code review for Kubernetes and AWS configurations?

You need an automated code review for Kubernetes and AWS configurations during pull requests, onboarding, audits, and incident retrospectives to identify downstream problems and surface maintainability issues.

What are the limitations of using static analysis for Python and AWS code reviews?

Static analysis for Python and AWS code reviews identifies code smells and architectural risks using best-practice guidelines, but requires human context to evaluate complex logic flows and downstream incident impacts.