code-review

Automate code reviews to detect security issues and maintainability problems.

8|Updated Jan 22, 2026
One-click install
npx skills add https://github.com/thechandanbhagat/claude-skills --skill code-review-thechandanbhagat
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/thechandanbhagat/claude-skills/tree/main/skills/code-review
Command: npx skills add https://github.com/thechandanbhagat/claude-skills --skill code-review-thechandanbhagat

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates comprehensive code reviews to detect security issues, maintainability problems, and opportunities for refactoring, reducing manual review time and human error.

Core Features & Use Cases

  • Security checks: Identify common vulnerabilities and insecure patterns in code.
  • Quality & maintainability: Flag code smells, complexity hotspots, and style issues.
  • Guided remediation: Provide actionable suggestions and refactoring tips during review.

Use Case: When reviewing a PR containing evolving Python/JavaScript code, run this Skill to generate a structured review outlining critical findings and suggested fixes.

Quick Start

Run a full PR review on the current branch and output a prioritized list of actionable fixes.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code reviews for security vulnerabilities and code smells in a pull request?

Automate code reviews for pull requests by running a rule-based prompt workflow that scans changes to detect security vulnerabilities, code smells, and maintainability problems. This generates structured, prioritized recommendations with actionable refactoring suggestions.

What is the best way to identify insecure patterns and complexity hotspots in Python or JavaScript code?

Identify insecure patterns and complexity hotspots in Python or JavaScript code by applying grep-like checks during a security audit. This flags common vulnerabilities and style issues while providing guided remediation tips for refactoring.

Can I use this automated code review tool on typical web projects without installing dependencies?

Yes, you can use this automated code review tool on typical web projects without installing dependencies. It applies a rule-based prompt workflow with grep-like checks to review changes directly across your evolving codebase.

How does static analysis during a PR review help improve code maintainability?

Static analysis during a PR review improves code maintainability by flagging code smells, complexity hotspots, and style issues. It provides structured, prioritized recommendations and actionable guidance for refactoring.

What are the limitations of using a rule-based prompt workflow for security audits?

The limitation of using a rule-based prompt workflow for security audits is that it relies on grep-like checks to identify common vulnerabilities. It may not catch complex, context-dependent security issues beyond predefined insecure patterns in typical web projects.