code-review

Analyze code quality, security, performance, and maintainability in repositories.

20|2|Updated Oct 18, 2025

Search Tags:#automation #performance #security #maintainability #code-review #analyze

Ready to run

npx skills add https://github.com/xdg/xdg-claude --skill code-review-xdg

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/xdg/xdg-claude/tree/main/code-review-agent/skills/code-review
Command: npx skills add https://github.com/xdg/xdg-claude --skill code-review-xdg

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyzes code to identify quality, security, performance, and maintainability issues, helping teams deliver safer, faster, and more maintainable software.

Core Features & Use Cases

Automated Quality & Security Checks: Scans code for defects, vulnerabilities, and anti-patterns.
Performance & Maintainability Insights: Highlights bottlenecks and long-term maintainability concerns across modules.
Use Case: Integrate into CI to automatically flag issues and generate actionable remediation reports.

Quick Start

Install and enable the code-review skill in your Claude Code environment, then run an automated audit on your repository.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate code reviews for security and maintainability in my repository?▼

Static analysis and security scanning operate on your codebase files within local development or CI/CD pipelines. The skill evaluates source code directly from your repository to generate actionable remediation reports without requiring external runtime data or execution logs.

Can I scope automated code analysis to a single module instead of the entire project?▼

Automated code analysis identifies defects, vulnerabilities, and anti-patterns through static analysis and security scanning. It evaluates code quality, security, performance, and maintainability metrics to generate actionable remediation reports for safer and more maintainable software.

What's the best way to integrate static analysis and security scanning into CI pipelines?▼

Integrating automated code analysis into CI pipelines flags security vulnerabilities, performance bottlenecks, and maintainability issues during development. You enable the skill in your environment and run automated audits on your repository to generate actionable remediation reports.

Does automated code review work with common programming languages and existing repositories?▼

Automated code review works across common languages and existing repositories to evaluate quality, security, performance, and maintainability. It applies static analysis and security scanning within your current project structure to generate actionable remediation insights.

How do I highlight performance bottlenecks and maintainability concerns in my codebase?▼

Automated code analysis highlights performance bottlenecks and long-term maintainability concerns across modules. By applying maintainability metrics and static analysis, it identifies slow code paths and structural anti-patterns that degrade software quality over time.