skills.rest
bugrabilge
bugrabilgeCOMMUNITY
Explore all skills by this author →
GitHub

code-reviewer

Analyze code for security vulnerabilities and performance issues.

10|2|Updated Mar 10, 2026
Search Tags:#quality assurance#static analysis#code review#performance#security#AI code analysis
One-click install
npx skills add https://github.com/bugrabilge/bilge-development-kit --skill code-reviewer-bugrabilge
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/bugrabilge/bilge-development-kit/tree/main/skills/code-reviewer
Command: npx skills add https://github.com/bugrabilge/bilge-development-kit --skill code-reviewer-bugrabilge

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for high-quality, secure, and performant code by providing expert-level code review capabilities, ensuring that software meets modern standards for reliability and maintainability.

Core Features & Use Cases

  • AI-Powered Analysis: Leverages advanced AI models for in-depth code understanding and vulnerability detection.
  • Static Analysis Integration: Seamlessly integrates with industry-standard tools like SonarQube and Semgrep for comprehensive scanning.
  • Security Focus: Specializes in identifying and mitigating OWASP Top 10 vulnerabilities and other security risks.
  • Performance Optimization: Analyzes code for bottlenecks, inefficient patterns, and scalability issues.
  • Use Case: A development team can use this Skill to automatically review every pull request, catching potential bugs, security flaws, and performance regressions before they reach production, thereby improving overall code quality and reducing technical debt.

Quick Start

Use the code-reviewer skill to analyze the attached code for security vulnerabilities and performance issues.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my code for OWASP Top 10 security vulnerabilities before production?▼

AI code analysis detects security vulnerabilities by evaluating patterns against current best practices. It identifies risks like the OWASP Top 10 and provides mitigation strategies to ensure production reliability.

How does static analysis integration work for detecting performance bottlenecks?▼

Static analysis integration works by scanning source code to detect performance bottlenecks and inefficient patterns. It identifies scalability issues and configuration flaws to ensure performant, reliable software.

Can I use AI code analysis to automatically review every pull request?▼

Yes, AI code analysis can automatically review every pull request. It proactively catches bugs, security flaws, and performance regressions to reduce technical debt and assure code quality.

Does this code review approach support configuration review for production reliability?▼

Yes, this code review approach supports configuration review to ensure production reliability. It evaluates setup configurations alongside static analysis to maintain high standards for software maintainability.

What is the best way to catch performance regressions and bugs in modern software development?▼

The best way to catch performance regressions and bugs is through proactive AI-powered code review. Integrating static analysis and security scanning into workflows identifies issues early and improves maintainability.

Related Skills

Explore More Software Engineering Skills→
utsavthakurutsavthakur

code-security-auditor

Audit codebases with static analysis and generate structured risk reports.

Community
Advanced
SpandanM110SpandanM110
1

code-review

Review code for correctness, security vulnerabilities, and performance issues.

Community
Intermediate
DevelopersGlobalDevelopersGlobal
65

ci-cd-pipelines

Automate CI/CD pipelines with quality gates and deployment processes.

Official
Advanced
adihebbalaeadihebbalae
3

security-audit

Audit code against the OWASP Top 10 with static and dynamic analysis.

Community
Advanced