code-review

Reviews Python and JavaScript code changes for security, reliability, and maintainability issues.

3|Updated Apr 4, 2026
One-click install
npx skills add https://github.com/twjarviszyra-web/hermes-unbound --skill code-review-twjarviszyra-web
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/twjarviszyra-web/hermes-unbound/tree/main/skills/software-development/code-review
Command: npx skills add https://github.com/twjarviszyra-web/hermes-unbound --skill code-review-twjarviszyra-web

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you review code changes thoroughly so you can catch security issues, logic bugs, maintainability problems, and missing tests before they reach production.

Core Features & Use Cases

  • Security-focused review: Flags hardcoded secrets, unsafe input handling, injection risks, and weak authorization checks.
  • Quality and reliability checks: Evaluates error handling, readability, duplication, function scope, and cleanup patterns.
  • Testing awareness: Confirms edge cases, failure paths, and test coverage for new or changed behavior.
  • Use case: Use it when reviewing a pull request, auditing legacy code, or preparing feedback on a teammate’s implementation.

Quick Start

Review the attached code changes for security, error handling, code quality, and testing gaps, then present your findings in the recommended review format.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is the best way to audit legacy Python and JavaScript codebases?

Auditing legacy Python and JavaScript codebases involves evaluating existing logic against safe coding patterns, checking for hardcoded secrets, and identifying missing tests to improve overall maintainability.

Can I use this to check my code for unsafe input handling and injection risks?

Yes, you can check code for unsafe input handling and injection risks by applying a security-focused review that flags weak authorization checks and validates how external inputs are processed.

Does this code review method work for both Python and JavaScript code?

Yes, this code review method works for both Python and JavaScript codebases, applying consistent checks for duplication, function scope, error handling, and testing gaps across both languages.

How do I ensure my code changes have proper testing coverage for edge cases?

To ensure code changes have proper testing coverage, review the implementation to confirm that edge cases, failure paths, and tests for new behavior are explicitly addressed before merging.

What are the limitations of checklist-based code review for pull requests?

Checklist-based code review for pull requests is limited to identifying known security, reliability, and maintainability patterns, and cannot replace contextual logic verification or complex architectural evaluation.