skills.rest
unclehowell
unclehowellCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

code-review

Review Python and JavaScript code changes for security and quality issues.

Updated Sep 1, 2021
Search Tags:#testing#security#python#javascript#code-quality#code-review#pull-requests
One-click install
npx skills add https://github.com/unclehowell/unclehowell --skill code-review-unclehowell
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/unclehowell/unclehowell/tree/main/skills/software-development/code-review
Command: npx skills add https://github.com/unclehowell/unclehowell --skill code-review-unclehowell

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Reviews often miss security vulnerabilities, error handling gaps, and maintainability issues, resulting in fragile or unsafe code being merged. This Skill provides a structured, checklist-driven approach to ensure consistent, high-quality feedback across pull requests and audits.

Core Features & Use Cases

  • Security-first checklist: Detects hardcoded secrets, input validation flaws, SQL/command injection risks, path traversal, and missing authorization checks.
  • Error handling & reliability: Verifies external call handling, logging practices, and proper resource cleanup.
  • Code quality & maintainability: Encourages single-responsibility functions, descriptive naming, DRY practices, and clear comments for complex logic.
  • Testing considerations: Checks for edge-case coverage, happy/error path tests, and presence of new tests where applicable.
  • Review output format: Produces a concise Summary, lists Critical Issues (must fix), Suggestions (nice to have), and clarifying Questions.
  • Use cases: Peer review of pull requests, pre-merge security audits, onboarding code quality mentoring, and automated guidance for manual reviewers.

Quick Start

Review the attached pull request and produce feedback using the Review Response Format, prioritizing security, error handling, code quality, and test coverage.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security-focused code review on a pull request?▼

To perform a security-focused code review, apply a checklist to identify hardcoded secrets, input validation gaps, and injection risks, then format feedback into a summary, critical issues, suggestions, and questions.

What security vulnerabilities should I look for during a Python or JavaScript code audit?▼

During a Python or JavaScript code audit, look for hardcoded secrets, input validation flaws, SQL or command injection risks, path traversal, missing authorization checks, and error handling issues.

How do I check pull requests for missing tests and edge cases?▼

Check pull requests for missing tests by verifying edge-case coverage, ensuring both happy and error paths are tested, and confirming new tests exist for newly introduced functionality.

Does this code review checklist work for both Python and JavaScript repositories?▼

Yes, this code review checklist works for Python and JavaScript repositories, applying language-specific checks to detect maintainability issues, DRY violations, and security vulnerabilities.

What is the best way to format feedback for a peer code review?▼

The best way to format peer code review feedback is to produce a concise summary, list critical issues requiring fixes, provide suggestions for improvement, and ask clarifying questions.

How do I identify error handling and reliability issues in my code changes?▼

Identify error handling and reliability issues by verifying external call handling, checking logging practices, and ensuring proper resource cleanup across your code changes.

Related Skills

Explore More Software Engineering Skills→
getsentrygetsentry
905

find-bugs

Identify bugs, security vulnerabilities, and code quality issues in local branch changes.

Official
Advanced
darkroomengineeringdarkroomengineering
41

review

Review TypeScript, React, and architecture for quality, security, and correctness issues.

Official
Advanced
d-o-hubd-o-hub
11

rust-code-quality

Review Rust code quality across eight dimensions including async patterns and error handling.

Community
Advanced
armanzeroeightarmanzeroeight
29

secrets-detector

Detect hardcoded secrets and API keys in source code repositories.

Community
Intermediate