code-review-specialist

Review codebases for security vulnerabilities, performance bottlenecks, and quality issues.

Updated May 22, 2026
One-click install
npx skills add https://github.com/shekerkamma/peopletech-marketplace --skill code-review-specialist-shekerkamma
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-specialist
Source: https://github.com/shekerkamma/peopletech-marketplace/tree/main/plugins/dev-tools/skills/code-review-specialist
Command: npx skills add https://github.com/shekerkamma/peopletech-marketplace --skill code-review-specialist-shekerkamma

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manual code reviews often miss critical security vulnerabilities, performance bottlenecks, and code quality issues, leading to unstable, insecure software and wasted engineering time.

Core Features & Use Cases

  • Security Analysis: Identifies authentication/authorization flaws, injection vulnerabilities, data exposure risks, and cryptographic weaknesses.
  • Performance Review: Evaluates algorithm efficiency, memory usage, database query optimization opportunities, and concurrency issues.
  • Code Quality & Maintainability: Checks adherence to SOLID principles, design patterns, naming conventions, function size, and cyclomatic complexity.
  • Use Case: Ideal for reviewing pull requests, auditing legacy code for security risks, or optimizing slow-running application code before deployment.

Quick Start

Ask the code-review-specialist skill to analyze your latest pull request code for security, performance, and quality issues.

Frequently Asked Questions about code-review-specialist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for security vulnerabilities and performance bottlenecks?

Code review identifies security vulnerabilities, performance bottlenecks, and quality issues by analyzing authentication flaws, injection risks, algorithm efficiency, and memory usage, delivering structured findings categorized by severity with actionable fix recommendations.

What is the best way to audit legacy code for security risks?

Auditing legacy code for security risks involves checking for data exposure, cryptographic weaknesses, and authorization flaws, producing structured findings categorized by severity with actionable recommendations to ensure security compliance.

Can I check adherence to SOLID principles and maintainability metrics in a pull request?

Yes, pull request reviews evaluate SOLID principle adherence, design patterns, naming conventions, and cyclomatic complexity to measure code quality and maintainability metrics, ensuring structural soundness before deployment.

How do I optimize slow-running application code before deployment?

Optimizing slow-running application code requires evaluating algorithm efficiency, database query optimization opportunities, and concurrency issues to detect performance bottlenecks and deliver actionable fix recommendations.

What types of injection vulnerabilities and authentication flaws does a security analysis catch?

Security analysis catches authentication and authorization flaws, injection vulnerabilities, data exposure risks, and cryptographic weaknesses, categorizing each finding by severity to prioritize code fixes.