code-reviewer

Review code changes for bugs, security, performance, and testing gaps.

15|2|Updated Jan 8, 2026
One-click install
npx skills add https://github.com/GrishaAngelovGH/gemini-cli-agent-skills --skill code-reviewer-grishaangelovgh
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/GrishaAngelovGH/gemini-cli-agent-skills/tree/main/code-reviewer
Command: npx skills add https://github.com/GrishaAngelovGH/gemini-cli-agent-skills --skill code-reviewer-grishaangelovgh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps engineers and reviewers identify bugs, security vulnerabilities, performance regressions, missing tests, and maintainability issues in code changes and repositories, enabling faster, higher-quality reviews and safer releases.

Core Features & Use Cases

  • Comprehensive PR Reviews: Step-by-step analysis of pull requests with prioritized findings for correctness, security, performance, and test coverage.
  • Language-Specific Guidance: Consults detailed checklists in references/ (javascript, nodejs, react, python, golang, java, nextjs) to ensure idiomatic and ecosystem-appropriate recommendations.
  • Standardized Reporting: Produces consistent, actionable review reports using the mandatory assets/REVIEW_TEMPLATE.md for clear communication with authors.

Quick Start

Request a full pull request review of the changed files and ask for a structured report using the included REVIEW_TEMPLATE.md that highlights critical issues, important improvements, and suggested fixes.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a comprehensive pull request review for bugs and security vulnerabilities?

Comprehensive pull request reviews analyze changed files to identify bugs, security vulnerabilities, performance regressions, and testing gaps. The review applies language-specific checklists for JavaScript, Node.js, React, Python, Go, and Java to ensure idiomatic, ecosystem-appropriate recommendations.

What's the best way to automate code reviews for Python and Go repositories?

Automated code reviews for Python and Go repositories apply idiomatic checklists from language-specific reference files to identify maintainability problems and security vulnerabilities. Structured reports are produced following a standardized review template that highlights critical issues and suggested fixes.

Does this code review tool provide security audit guidance for React and Node.js applications?

Yes, security audits for React and Node.js applications are supported through detailed checklists in the references directory. The review process verifies input validation, dependency security, and identifies security vulnerabilities specific to the JavaScript and Node.js ecosystems.

Can I use this for reviewing test coverage gaps and performance regressions in Java codebases?

Yes, reviewing test coverage gaps and performance regressions in Java codebases is a core function. The review process verifies existing tests, checks for missing test coverage, identifies performance regressions, and applies Java-specific idiomatic guidance from reference checklists.

How do I generate a structured code review report with prioritized findings for a refactor proposal?

Structured code review reports with prioritized findings are generated using the mandatory REVIEW_TEMPLATE.md file. The report template ensures consistent communication by highlighting critical issues, important improvements, and suggested fixes for refactor proposals and pull requests.

What limitations should I expect when reviewing Next.js code changes for maintainability issues?

Next.js code reviews apply specific reference checklists to identify maintainability issues, but the review is limited to the languages and frameworks with existing reference files: JavaScript, Node.js, React, Python, Go, Java, and Next.js. Codebases outside these ecosystems lack idiomatic guidance.