code-review-specialist

Identify and report security, performance, and maintainability flaws in code during pull requests.

2|1|Updated Feb 27, 2026
One-click install
npx skills add https://github.com/spideynolove/claude-code-in-action --skill code-review-specialist-spideynolove
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-specialist
Source: https://github.com/spideynolove/claude-code-in-action/tree/main/00-materials/claude-howto/03-skills/code-review
Command: npx skills add https://github.com/spideynolove/claude-code-in-action --skill code-review-specialist-spideynolove

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Streamlines and hardens code reviews by providing systematic security, performance, and quality analysis for pull requests and code submissions.

Core Features & Use Cases

  • Security Analysis: identify auth, data exposure, injection, cryptographic weaknesses, and sensitive data logging issues.
  • Performance & Quality: evaluate algorithm efficiency, memory usage, maintainability (SOLID, naming, test coverage), and documentation.
  • Use Case: during a PR, generate a structured review report with actionable fixes and a risk-based priority.

Quick Start

Use the code-review-specialist to analyze the latest PR and output a structured review focusing on security, performance, and maintainability.

Frequently Asked Questions about code-review-specialist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security and performance analysis for pull requests?

Automate security and performance analysis for pull requests by evaluating code submissions for auth flaws, injection risks, memory usage, and SOLID violations. This generates a structured review report with actionable fixes and risk-based priorities.

What is static analysis for code reviews and how does it identify security flaws?

Static analysis for code reviews identifies security flaws by detecting cryptographic weaknesses, data exposure, and sensitive data logging without executing the code. It systematically evaluates algorithms and documentation to ensure maintainability best practices.

Can I use code review best practices across multiple programming languages?

Yes, you can apply code review best practices across multiple programming languages. The analysis evaluates SOLID principles, naming conventions, and test coverage universally to output structured review templates with traceable findings.

What's the best way to structure a code audit report for maintainability?

The best way to structure a code audit report for maintainability is to generate a template with traceable findings, risk-based priorities, and actionable fixes. This evaluates algorithm efficiency, memory usage, and documentation gaps systematically.

Does static analysis detect injection and cryptographic weaknesses during code reviews?

Yes, static analysis detects injection and cryptographic weaknesses during code reviews. It systematically identifies authentication issues, data exposure, and sensitive data logging, providing structured review templates with traceable findings.

When do I need an automated code review for performance and quality gaps?

You need an automated code review for performance and quality gaps during pull requests and code submissions. It evaluates algorithm efficiency, memory usage, and SOLID compliance to output structured reports with risk-based priority fixes.