code-reviewer

Review code changes for bugs, security, performance, and test gaps.

2|1|Updated Jul 25, 2026
One-click install
npx skills add https://github.com/CODE-SAURABH/OpenSkills --skill code-reviewer-code-saurabh
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/CODE-SAURABH/OpenSkills/tree/main/code-reviewer
Command: npx skills add https://github.com/CODE-SAURABH/OpenSkills --skill code-reviewer-code-saurabh

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps identify correctness bugs, security vulnerabilities, performance problems, weak test coverage, and maintainability issues before code changes are merged or shipped.

Core Features & Use Cases

  • Structured Review Workflow: Evaluates context, logic, security, tests, maintainability, and integration points in a deliberate six-pass process.
  • Severity-Based Findings: Classifies issues as blockers, major issues, minor issues, suggestions, or notes, with concrete remediation guidance.
  • Technology Checklists: Covers common risks in JavaScript, TypeScript, Python, Go, SQL, authentication, APIs, data persistence, and external services.
  • Use Case: Apply it to a pull request involving a new API endpoint to uncover authorization gaps, unsafe input handling, missing tests, and integration risks before release.

Quick Start

Ask the code-reviewer skill to review the provided diff and return prioritized findings with file locations, severity classifications, explanations, fixes, and an explicit review verdict.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a pull request for security vulnerabilities and bugs?

To review a pull request for security vulnerabilities and bugs, analyze the code diff using a structured six-pass process that evaluates context, logic, security, tests, maintainability, and integration points to classify severity and provide remediation guidance.

What is a six-pass code review workflow?

A six-pass code review workflow is a structured evaluation method that sequentially checks contextual code reading, logic correctness, security validation, test coverage assessment, maintainability risks, and integration checks across common programming languages.

Can I use automated code review for database migrations and API changes?

Yes, you can use automated code review for database migrations and API changes. It specifically evaluates authentication flows, data persistence layers, and external service integrations to uncover authorization gaps, unsafe input handling, and integration risks.

How do I assess test coverage gaps in a commit?

To assess test coverage gaps in a commit, perform a dedicated test coverage assessment pass that identifies missing test scenarios for the changed logic, evaluates weak assertions, and provides concrete remediation guidance for the gaps.

What's the best way to classify severity of issues found in a code diff?

The best way to classify severity of issues found in a code diff is to categorize findings into blockers, major issues, minor issues, suggestions, or notes, ensuring that critical correctness bugs and security vulnerabilities are prioritized before shipping.

Does automated code review work with JavaScript, TypeScript, Python, and Go?

Yes, automated code review works with JavaScript, TypeScript, Python, and Go. It applies technology-specific checklists to cover common risks in these languages, alongside SQL, authentication, APIs, and external service integrations.