Analyze code for security vulnerabilities, type safety, and linting violations.
npx skills add https://github.com/QBall-Inc/the-bulwark --skill code-review-qball-inc
Please help me install this Agent Skill. Skill: code-review Source: https://github.com/QBall-Inc/the-bulwark/tree/main/skills/code-review Command: npx skills add https://github.com/QBall-Inc/the-bulwark --skill code-review-qball-inc
This Skill automates the process of reviewing code for quality, security vulnerabilities, type safety, and adherence to coding standards, ensuring higher-quality, more secure software.
Use the code-review skill to perform a full security and quality audit on the 'src/utils' directory.
High-intent search queries and answers about installing and using this skill.
Automated code review performs multi-phase static analysis and LLM-based judgment to identify security vulnerabilities, type safety issues, and linting violations before deployment. This reduces manual review time and improves software reliability.
Yes, framework-specific code review detects and applies predefined patterns for React, Express, Django, and Vue. It uses a generic fallback to ensure coding standards are checked even when a specific framework is not detected.
The best way to check for vulnerabilities and linting violations is a multi-phase code review combining deterministic static analysis with LLM-based judgment against predefined patterns, ensuring comprehensive quality and security assurance.
You can run a full security and quality audit on a specific directory by initiating the code review process, which automatically flags critical security issues and quality concerns across the specified source files.
Yes, static analysis combined with LLM-based judgment specifically identifies deviations from predefined coding standards, ensuring your codebase maintains consistent quality and adheres to required structural patterns.
LLM-based judgment complements deterministic linting by evaluating complex deviations from predefined coding standards that static analysis alone cannot catch, ensuring higher-quality and more secure software.
chicanoandres702Extract functions, classes, modules, and dependencies into C4 code documentation with Mermaid diagrams.
SHAdd0WTAkaGenerate and verify exploit PoCs in sandboxed environments with auditable reports.
drgaciwGenerate GitLab CI/CD pipeline configurations for testing, building, and deployment.
RangeyRoverRun static analysis across multiple languages and generate prioritized issue reports.
