code-review

Review pull requests for architecture, code quality, security, and performance.

Updated Dec 20, 2023
One-click install
npx skills add https://github.com/Thiago-Cruz-eng/Hibrygame --skill code-review-thiago-cruz-eng
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/Thiago-Cruz-eng/Hibrygame/tree/main/.claude/skills/code-review
Command: npx skills add https://github.com/Thiago-Cruz-eng/Hibrygame --skill code-review-thiago-cruz-eng

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps prevent regressions, quality issues, and security vulnerabilities by providing structured, constructive feedback during code review.

Core Features & Use Cases

  • High-level architecture and design review: Checks whether the change fits existing patterns, is placed correctly, and follows reasonable abstractions.
  • Detailed code quality checklist: Reviews naming, function/class responsibilities, error handling, duplication, and maintainability.
  • Security and performance + testing coverage checks: Evaluates input validation, authz/authn, secret handling, common injection/XSS risks, performance concerns, and whether tests cover edge/error cases.
  • Use Case: Reviewing a pull request that introduces a new feature while touching multiple files—identify critical security issues, potential N+1 queries, missing tests, and opportunities to simplify code.

Quick Start

Ask the AI to review your pull request and return prioritized feedback across architecture, code quality, security, performance, and testing coverage.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a pull request for security vulnerabilities and code quality?

Review a pull request for security vulnerabilities and code quality by applying structured checklists covering SOLID principles, input validation, authz/authn, and secure secret handling to identify injection risks and maintainability issues. This process yields prioritized, actionable feedback.

What is the best way to audit code changes for performance risks and missing tests?

The best way to audit code changes for performance risks and missing tests is to evaluate resource management, check for N+1 queries, and verify that testing covers edge and error cases. This identifies performance bottlenecks and ensures documentation completeness.

How does a code review checklist find bugs before a merge?

A code review checklist finds bugs before a merge by enforcing structured evaluations of architecture fit, detailed code correctness, and vulnerability patterns. It checks naming, function responsibilities, and error handling to prevent regressions and security gaps.

Can I use automated code review to check architecture fit and SOLID principles?

Yes, you can use automated code review to check architecture fit and SOLID principles. The review evaluates whether changes fit existing patterns, follow reasonable abstractions, and enforce structured checklists for class responsibilities and maintainability.

What security checks should a pull request audit cover?

A pull request audit should cover security checks including input validation, authz/authn, secret handling, and common injection or XSS risks. It evaluates secure input handling and vulnerability patterns to provide prioritized, actionable recommendations.

Why does my code review miss N+1 query performance issues?

Your code review misses N+1 query performance issues if it lacks a structured performance risks evaluation. Applying a detailed checklist for resource management and database access patterns identifies these bottlenecks before merge.