code-reviewer

Automates structured code reviews with security scans, complexity metrics, and quality checks across Python, JavaScript/TypeScript, Java, and Go.

4|Updated Dec 7, 2025
One-click install
npx skills add https://github.com/icartsh/icartsh_plugin --skill code-reviewer-icartsh
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/icartsh/icartsh_plugin/tree/main/icartsh-plugin/skills/code-reviewer
Command: npx skills add https://github.com/icartsh/icartsh_plugin --skill code-reviewer-icartsh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates structured code reviews focusing on security vulnerabilities, quality metrics, performance, and documentation standards.

Core Features & Use Cases

  • Security scanning patterns: detect common vulnerabilities
  • Quality metrics: maintainability, cyclomatic complexity, and test coverage
  • Performance review: identify bottlenecks and optimization opportunities

Quick Start

Run review_helper.py against a codebase to generate a full review; review_checklist.md provides a human-readable checklist.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security scanning and code quality checks on my pull requests?

Automated code reviews identify security vulnerabilities, quality defects, and performance bottlenecks using security scanners, complexity analysis, and linting. Run the review workflow against pull requests or code submissions to generate structured reports in Markdown or JSON format across Python, JavaScript/TypeScript, Java, and Go codebases.

Can I detect security vulnerabilities and dependency issues in my codebase automatically?

Yes, security scanning patterns detect common vulnerabilities while dependency vulnerability scans flag unsafe packages. The tool performs static analysis across multiple languages to identify security risks before code merges, satisfying automated security scanning requirements.

What code quality metrics does automated review capture?

Code review automation measures maintainability, cyclomatic complexity, and test coverage to identify performance bottlenecks and optimization opportunities. Complexity metrics and quality checks provide actionable insights on code health and technical debt across your repository.

How do I run code reviews on legacy repositories and existing codebases?

Apply the CLI tool against legacy repositories to generate comprehensive reviews covering security, quality, performance, and documentation standards. The structured workflow produces multi-format reports so you can assess code health across large or mature codebases systematically.

Does this work with Python, JavaScript, Java, and Go projects?

Yes, automated code review supports Python, JavaScript/TypeScript, Java, and Go. Security scanning, complexity analysis, linting, and dependency checks run across all four languages in a unified workflow.

What output formats does the code review tool generate?

The tool outputs structured reports in both Markdown and JSON formats. A human-readable checklist and CLI output enable integration with CI/CD workflows while maintaining compatibility with downstream analysis and notification systems.