skills.rest
act70255
act70255COMMUNITY
Explore all skills by this author →
GitHub

code-reviewer

Automate code reviews with static analysis and AI vulnerability detection.

Updated Mar 11, 2026
Search Tags:#code quality#static analysis#code review#performance#security#AI analysis#review automation
One-click install
npx skills add https://github.com/act70255/SkillsBundle --skill code-reviewer-act70255
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/act70255/SkillsBundle/tree/main/testing/skills/code-reviewer
Command: npx skills add https://github.com/act70255/SkillsBundle --skill code-reviewer-act70255

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates code reviews, providing AI-powered analysis for security, performance, and maintainability, reducing manual effort and enhancing code quality.

Core Features & Use Cases

  • AI-Powered Code Analysis: Integrates with AI review tools for comprehensive code analysis.
  • Static Analysis Tools: Utilizes SonarQube, CodeQL, and Semgrep for code scanning.
  • Security Code Review: Detects OWASP Top 10 vulnerabilities and more.
  • Performance & Scalability Analysis: Identifies database query issues and resource management problems.
  • Configuration & Infrastructure Review: Ensures production configurations are secure and reliable.
  • Modern Development Practices: Supports TDD, BDD, and contract testing.
  • Code Quality & Maintainability: Enforces clean code principles and design patterns.
  • Team Collaboration & Process: Optimizes pull request workflows and team coding standards.
  • Language-Specific Expertise: Offers specialized reviews for JavaScript, Python, Java, and more.
  • Integration & Automation: Integrates with GitHub Actions, GitLab CI/CD, and Jenkins.

Quick Start

Analyze the codebase in the 'source-code' directory for potential security issues and performance bottlenecks.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code reviews for security vulnerabilities and performance issues?▼

Automate code reviews using AI-driven analysis combined with static analysis tools like SonarQube, CodeQL, and Semgrep to detect vulnerabilities, code smells, and performance bottlenecks across multiple programming languages.

How does AI static analysis detect OWASP Top 10 vulnerabilities in my codebase?▼

AI static analysis detects OWASP Top 10 vulnerabilities by applying AI models and scanning tools to evaluate your source code, ensuring security code review identifies flaws and enhances overall code quality.

Can I integrate AI code analysis with GitHub Actions, GitLab CI/CD, and Jenkins?▼

Yes, AI code analysis supports integration with continuous integration systems including GitHub Actions, GitLab CI/CD, and Jenkins, enabling automated review processes directly within your pull request workflows.

What is the best way to identify database query issues and resource management problems?▼

The best way to identify database query issues is through performance and scalability analysis, which detects resource management problems and ensures production configurations remain secure and reliable.

Does automated code review support specialized analysis for JavaScript, Python, and Java?▼

Yes, automated code review provides language-specific expertise offering specialized reviews for JavaScript, Python, Java, and more, enforcing clean code principles and design patterns for maintainability.

How do I enforce clean code principles and optimize pull request workflows for my team?▼

Enforce clean code principles and optimize pull request workflows by applying modern development practices like TDD and BDD, establishing team coding standards through automated configuration and infrastructure review.

Related Skills

Explore More Software Engineering Skills→
AndyAnh174AndyAnh174

github-workflow-automation

Automate GitHub workflows with AI-assisted pull request reviews and issue triaging.

Community
Advanced
timurgaleevtimurgaleev
5

canary

Monitor post-deploy web apps for defects and performance regressions.

Community
Advanced
JFrangelJFrangel

best-practices

Audit code quality and generate unit/integration tests for Jest, Vitest, Cypress, and Playwright.

Community
Advanced
dandudzidandudzi
2

sast-configuration

Automate SAST tool selection, configuration, and CI/CD integration.

Community
Advanced