code-review

Review code changes for security, correctness, performance, and testing issues.

195|12|Updated Jul 19, 2026
One-click install
npx skills add https://github.com/ZJU-REAL/HugAgentOS --skill code-review-zju-real
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/ZJU-REAL/HugAgentOS/tree/main/src/backend/skill_bundles/marketplace/code-review
Command: npx skills add https://github.com/ZJU-REAL/HugAgentOS --skill code-review-zju-real

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a systematic way to identify security vulnerabilities, correctness bugs, performance regressions, maintainability problems, and testing gaps before code reaches production.

Core Features & Use Cases

  • Structured Review Checklist: Examine changes across security, performance, correctness, maintainability, testing, accessibility, and documentation.
  • Severity-Based Feedback: Classify findings as critical, major, minor, or nitpick so teams can prioritize merge-blocking issues.
  • Use Case: Review a pull request line by line, identify an authorization flaw and missing edge-case tests, then provide precise feedback with risks and suggested fixes.

Quick Start

Use the code-review skill to inspect the attached pull request, identify blocking and non-blocking issues, and return findings with severity labels, explanations, and concrete remediation suggestions.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a pull request for security and performance issues?

A pull request code review identifies security vulnerabilities, performance regressions, and correctness bugs before production deployment. It applies a structured checklist using high-level, line-by-line, and edge-case passes to ensure code changes meet engineering review standards.

What is severity-based feedback in code review?

Severity-based feedback in code review classifies findings as critical, major, minor, or nitpick. This mechanism helps teams prioritize merge-blocking issues and ensures that security flaws or performance regressions are addressed before deployment.

How do I check if my code changes have missing edge-case tests?

Check for missing edge-case tests by assessing regression test coverage during the code review process. This involves validating external inputs, error handling, and concurrency risks to ensure meaningful test coverage exists for all code changes.

Can I use automated code review to assess concurrency and scalability risks?

Yes, automated code review can assess concurrency and scalability risks by applying systematic review practices to code changes. It validates error handling and evaluates architecture decisions to identify potential performance regressions before production deployment.

What's the best way to find critical bugs before code reaches production?

The best way to find critical bugs before production is to implement a structured review checklist covering security, performance, and maintainability. This approach uses line-by-line passes and severity-labeled feedback to identify and fix merge-blocking issues early.

Does code review work for architecture decisions and engineering standards?

Yes, code review works for architecture decisions and engineering standards by applying systematic review practices to evaluate scalability risks and maintainability. It ensures code changes align with high-level design standards and includes meaningful regression test coverage.