skills.rest
vladm3105
vladm3105COMMUNITY
Explore all skills by this author →
GitHub

code-review

Automate code review across multi-language repositories with static analysis and security scanning.

16|3|Updated Nov 10, 2025
Search Tags:#code quality#static analysis#code review#linting#software development#type checking#security scan#ADR compliance
One-click install
npx skills add https://github.com/vladm3105/aidoc-flow-framework --skill code-review-vladm3105
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/vladm3105/aidoc-flow-framework/tree/main/.claude/skills/code-review
Command: npx skills add https://github.com/vladm3105/aidoc-flow-framework --skill code-review-vladm3105

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pylint, ruff, mypy / pyright, bandit, safety, radon, coverage, semgrep.

What problem does it solve?

This Skill performs comprehensive, automated code reviews to ensure quality, security, maintainability, and compliance with architectural decisions and specifications, catching issues before they reach production.

Core Features & Use Cases

  • Static Analysis & Security Scanning: Integrate linting, type checking, complexity metrics, and detect security vulnerabilities like SQL injection or hardcoded secrets.
  • Architectural & SPEC Compliance: Validate code against Architecture Decision Records (ADRs) and technical specifications to ensure design adherence and consistency.
  • Automated Fix Suggestions: Get recommendations for auto-fixable issues, refactorings, performance optimizations, and security patches.
  • Use Case: Before merging a pull request, use this skill to automatically scan for SQL injection vulnerabilities, ensure code complexity is within limits, verify test coverage, and confirm adherence to architectural decisions, providing a detailed report and blocking critical issues.

Quick Start

Use the code-review skill to analyze 'src/auth/service.py' for quality, security, and compliance issues.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review to catch security vulnerabilities and quality issues before merging?▼

Automated code review scans pull requests using static analysis, linting, type checking, and security scanning to detect vulnerabilities, code quality gaps, and architectural misalignments. It integrates tools like pylint, mypy, bandit, and semgrep to enforce standards and block critical issues before merge.

Can I use code review automation to verify compliance with architectural decisions?▼

Yes, this automation validates code against Architecture Decision Records and technical specifications, ensuring design adherence across multi-language repositories. It checks architectural alignment alongside security and quality metrics in a single pipeline.

What tools does automated code review use for security scanning and type checking?▼

It orchestrates pylint, ruff, mypy/pyright for type checking, bandit and safety for security vulnerability detection, radon for complexity analysis, coverage for test coverage metrics, and semgrep for pattern-based security scanning.

How do I set up code quality gates that block PRs with critical issues?▼

Configure the multi-tool pipeline to run static analysis, security scans, and compliance checks on incoming PRs. It generates detailed reports, flags critical vulnerabilities and architectural violations, and blocks merge until issues are resolved.

Does automated code review work with multi-language repositories?▼

Yes, it applies across multi-language repositories, adapting linting, type checking, and security scanning to each language in your codebase while enforcing uniform quality and compliance standards.

What's the difference between linting and the full code review automation this provides?▼

Linting fixes style issues; this automation combines static analysis, type checking, security scanning, complexity metrics, coverage analysis, and architectural compliance validation into a comprehensive pre-merge quality gate.

Related Skills

Explore More Software Engineering Skills→
act70255act70255

lint-and-validate

Lint and statically analyze Node.js and Python code with ESLint, Pylint, Ruff, MyPy, and Bandit.

Community
Advanced
ramonclaudioramonclaudio
4

audit

Audit a repository for architecture, bugs, and security findings with fix proposals.

Community
Advanced
thanhquan3010thanhquan3010

springboot-verification

Automates build, static analysis, testing with coverage, vulnerability scanning and secret detection for Spring Boot projects.

Community
Advanced
RelicWare-CoRelicWare-Co

ultracite

Automate linting and formatting setup for JavaScript and TypeScript projects.

Official
Basic