code-reviewer

Analyze code for security vulnerabilities, performance bottlenecks, and maintainability issues.

Updated Dec 29, 2025
One-click install
npx skills add https://github.com/AmidVoshakul/chatorai --skill code-reviewer-amidvoshakul
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/AmidVoshakul/chatorai/tree/main/assets/skills/code-reviewer
Command: npx skills add https://github.com/AmidVoshakul/chatorai --skill code-reviewer-amidvoshakul

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the challenge of maintaining high code quality, security, and performance in fast-paced development environments by automating the detection of vulnerabilities, technical debt, and architectural anti-patterns.

Core Features & Use Cases

  • Automated Security Audits: Scans for OWASP Top 10 vulnerabilities and insecure coding patterns.
  • Performance & Quality Analysis: Identifies bottlenecks, cyclomatic complexity, and maintainability issues.
  • Use Case: Before merging a pull request, use this skill to perform a comprehensive review of your new feature branch to ensure it meets production-grade security and performance standards.

Quick Start

Use the code-reviewer skill to analyze the current repository for security vulnerabilities and performance bottlenecks.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security audits and code review for a pull request?

Automated security audits and code review for pull requests are performed by scanning for OWASP Top 10 vulnerabilities and insecure coding patterns to ensure production-grade standards. This skill integrates static analysis with pattern recognition to provide actionable remediation strategies.

What is static analysis for identifying performance bottlenecks and maintainability issues?

Static analysis for performance and maintainability evaluates code to identify bottlenecks, cyclomatic complexity, and architectural anti-patterns. It applies LLM-based pattern recognition to detect technical debt and provide actionable feedback for refactoring.

Can I use this code analysis to check production-readiness for my new feature branch?

Yes, you can use this code analysis to check production-readiness by performing a comprehensive review of your new feature branch. It identifies security vulnerabilities, performance issues, and maintainability concerns before merging.

What's the best way to detect OWASP Top 10 vulnerabilities during software development?

The best way to detect OWASP Top 10 vulnerabilities during development is applying comprehensive code analysis that scans for insecure coding patterns. This automates vulnerability detection and provides remediation strategies to maintain high security.

Does this automated code review work without external static analysis tools?

No, this automated code review requires integration with static analysis tools alongside LLM-based pattern recognition. These dependencies are necessary to perform comprehensive vulnerability detection and performance bottleneck identification.