code-review

Identify code quality, security, and performance issues across JavaScript/TypeScript, Python, Java, and Go.

2|Updated Jan 7, 2026
One-click install
npx skills add https://github.com/yuma588/skill-gallery --skill code-review-yuma588
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/yuma588/skill-gallery/tree/main/skill-gallery-deploy/skills/Anthropic/code-review-skill
Command: npx skills add https://github.com/yuma588/skill-gallery --skill code-review-yuma588

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires eslint, pylint, bandit, black, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Automates the detection of code quality issues, security vulnerabilities, and performance concerns across multiple languages, delivering structured, actionable feedback.

Core Features & Use Cases

  • Language-agnostic static analysis across JavaScript/TypeScript, Python, Java, and Go.
  • Generates structured review reports with issue details, severity, and recommended fixes.
  • Integrates with existing toolchains and CI/CD to streamline PR reviews.

Quick Start

Provide the path to the codebase you want reviewed and run the analysis workflow to generate a comprehensive report.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review for JavaScript, Python, Java, and Go?

Automated multi-language code review identifies quality, security, and performance issues by integrating ESLint, Pylint, Bandit, and Checkstyle/SpotBugs. You simply provide a codebase path to generate structured JSON or Markdown reports with actionable recommendations.

Can I use ESLint and Pylint together for multi-language static analysis?

Yes, running ESLint and Pylint together enables multi-language static analysis across JavaScript, Python, Java, and Go. The workflow integrates these tools to produce structured review results with issue details, severity levels, and recommended fixes.

Does automated static analysis generate structured reports for PR checks?

Automated static analysis generates structured JSON and Markdown reports containing issue details, severity, and recommended fixes suitable for PR checks. It integrates with existing toolchains and CI/CD pipelines to streamline pull request reviews.

What's the best way to detect security vulnerabilities in a Python codebase?

The best way to detect security vulnerabilities in a Python codebase is using Bandit and Pylint within an automated review workflow. This combination identifies security vulnerabilities and code quality issues, outputting structured reports with severity levels and recommended fixes.

Do I need to install ESLint and Black before running automated code review?

Yes, installing ESLint, Pylint, Bandit, and Black is required before running automated code review. These dependencies enable the static analysis workflow to identify code quality, security, and formatting issues across JavaScript, TypeScript, and Python projects.

Why use Bandit for static analysis instead of standard code quality linters?

Use Bandit for static analysis to specifically detect Python security vulnerabilities that standard code quality linters miss. While Pylint handles general code quality, Bandit targets security concerns, and combining both produces comprehensive structured review reports.