code-review

Analyze Rails code quality and architecture issues with Brakeman, Bundler-Audit, and RuboCop.

Updated Mar 19, 2026
One-click install
npx skills add https://github.com/reckerswartz/resume_builder --skill code-review-reckerswartz
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/reckerswartz/resume_builder/tree/main/.windsurf/skills/code-review
Command: npx skills add https://github.com/reckerswartz/resume_builder --skill code-review-reckerswartz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Rails applications often suffer from architectural smells, security gaps, and maintainability issues that impede delivery. This Skill provides a non-destructive, expert code review that identifies SOLID violations, N+1 queries, misconfigurations, and anti-patterns without touching source code.

Core Features & Use Cases

  • Non-destructive analysis: reports on code quality and architecture without modifying files.
  • Security and quality checks: surfaces issues via Brakeman, Bundler-Audit, and RuboCop findings.
  • Guided remediation: provides structured feedback, prioritized issues (P0-P3), and concrete examples for fixes.

Quick Start

Point the tool at a Rails project directory to receive a non-destructive review report.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a non-destructive Rails code review for security and architecture issues?

To run a non-destructive Rails code review, point the tool at your project directory to analyze code quality, security gaps, and SOLID violations without modifying source files. It outputs a structured report with prioritized recommendations.

Can I detect N+1 queries and SOLID violations in a Rails project without modifying the code?

Yes, you can detect N+1 queries and SOLID violations without modifying source code. The analysis performs static checks across controllers, models, and views to surface maintainability issues safely and report them in a structured checklist.

How does static analysis with Brakeman, Bundler-Audit, and RuboCop work for Rails code quality?

Static analysis with Brakeman, Bundler-Audit, and RuboCop works by scanning the Rails codebase to identify security vulnerabilities, dependency risks, and style violations, generating a prioritized report with actionable remediation steps.

What is the best way to find security gaps and anti-patterns in Rails controllers and models?

The best way to find security gaps and anti-patterns in Rails controllers and models is using a static analysis tool that cross-references Brakeman and Bundler-Audit findings, producing a prioritized P0-P3 report with concrete fix examples.

Does this code review tool work with Rails projects of any size?

Yes, the code review tool works with Rails projects of any size. It applies static analysis across the entire project structure to detect architecture issues and misconfigurations, scaling its checks to fit the application's scope.

What are the limitations of using static analysis for Rails architecture and maintainability checks?

Static analysis for Rails architecture checks is limited to detecting code patterns and misconfigurations without runtime context. It cannot identify issues that only manifest during execution or dynamic database interactions, and it strictly avoids modifying source code.