code-review

Review code changes for bugs, security issues, and anti-patterns before merging.

Updated May 5, 2026
One-click install
npx skills add https://github.com/sonhaicoder/haiclaudeskill --skill code-review-sonhaicoder
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/sonhaicoder/haiclaudeskill/tree/main/skills/code-review
Command: npx skills add https://github.com/sonhaicoder/haiclaudeskill --skill code-review-sonhaicoder

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Code review can be the difference between shipping bugs and delivering reliable software. This skill helps identify bugs, security issues, and anti-patterns BEFORE merge by enforcing a structured, multi-lens approach.

Core Features & Use Cases

  • AUTO-TRIGGER when the user requests a review or a PR/diff is present, and the agent spawns reviewer/qa-reviewer.
  • Six audit lenses: Security, Multi-Tenant data leak, Money precision, Race conditions, State machine violations, and API↔Frontend boundary checks.
  • Comprehensive review workflow with a standardized scoring system and a detailed report for developers to fix issues before merging.

Quick Start

Run a full code review on the changed files and generate a prioritized issue report.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find security issues and bugs in a pull request before merging?

To find security issues and bugs in a pull request before merging, you can run an automated code review using six audit lenses including security, multi-tenant data leaks, and race conditions. This process analyzes PR diffs across multiple languages to generate a prioritized issue report for developers to fix.

What is multi-tenant data leak detection in code review?

Multi-tenant data leak detection in code review is an audit lens that identifies cross-tenant data exposure vulnerabilities in backend code changes. It operates by scanning diffs and pull requests to ensure tenant boundaries are strictly enforced before merging.

How to check API and frontend boundary issues in code diffs?

To check API and frontend boundary issues in code diffs, apply the API frontend boundary audit lens during your code review. This mechanism evaluates commits across multiple languages and frameworks to catch contract mismatches and state machine violations before generating a structured report.

Does automated code review work for race conditions and money precision errors?

Automated code review does work for race conditions and money precision errors by applying dedicated audit lenses to the changed files. It scans pull requests and commits to detect these specific anti-patterns, providing a standardized score and detailed report to prevent flawed merges.

What is the best way to audit code changes for anti-patterns across multiple frameworks?

The best way to audit code changes for anti-patterns across multiple frameworks is to use a structured multi-lens code review approach. By enforcing automated grep recipes and six audit lenses on PRs and diffs, you get a comprehensive risk assessment and prioritized issue report.

Can I use automated code review for both backend and frontend commits?

Yes, you can use automated code review for both backend and frontend commits. The review workflow applies its six audit lenses to diffs across multiple languages and frameworks, outputting a standardized scoring system and detailed issue report for any code changes.