code-review

Analyze code for security, correctness, performance, and maintainability issues.

Updated Mar 5, 2026
One-click install
npx skills add https://github.com/yjzaaa/learn-claude-code-my --skill code-review-yjzaaa
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/yjzaaa/learn-claude-code-my/tree/main/skills/code-review
Command: npx skills add https://github.com/yjzaaa/learn-claude-code-my --skill code-review-yjzaaa

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Conducting consistent, thorough code reviews to surface security vulnerabilities, correctness defects, performance issues, and maintainability gaps, enabling safer and higher-quality software.

Core Features & Use Cases

  • Security: identifies injection, authentication, authorization, data exposure, cryptography flaws, and known vulnerabilities.
  • Correctness & Reliability: detects logic errors, race conditions, resource leaks, and inadequate error handling.
  • Performance & Maintainability: highlights inefficient algorithms, blocking I/O, memory issues, code smells, and testing gaps.
  • Use Case: ideal for PR reviews, code audits, and design reviews to produce a standardized, actionable report with a clear verdict.

Quick Start

Provide the target file or repository path and I will generate a structured code-review report with findings and recommendations.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a structured code review to identify security and correctness issues?

To conduct a structured code review, provide a target file or repository path to generate a standardized report. This report identifies security vulnerabilities, correctness defects, and reliability issues like race conditions and resource leaks with actionable recommendations.

What is the best way to find performance bottlenecks and maintainability gaps in a pull request?

The best way to find performance and maintainability gaps in a pull request is through a structured assessment using explicit checklists. This process highlights inefficient algorithms, blocking I/O, memory issues, and code smells to produce a clear review verdict.

Can I use static analysis for code audits across different programming languages?

Yes, static analysis for code audits is applicable across languages and project sizes. It evaluates code to detect injection flaws, authentication errors, cryptography issues, logic errors, and inadequate error handling without language-specific limitations.

How do I generate an actionable report for a bug-hunting session?

You can generate an actionable report for a bug-hunting session by providing the target code path. The review output standardizes findings into security, correctness, performance, and testing categories, delivering a clear verdict and explicit recommendations.

What specific security vulnerabilities can a code review detect in my codebase?

A code review can detect injection flaws, authentication and authorization weaknesses, data exposure risks, cryptography flaws, and known vulnerabilities. It also surfaces logic errors, race conditions, resource leaks, and inadequate error handling.

Does a structured code review check for testing gaps and inadequate error handling?

Yes, a structured code review explicitly checks for testing gaps and inadequate error handling. It assesses correctness and reliability by detecting logic errors and race conditions, while highlighting maintainability issues like missing tests and inefficient algorithms.