code-reviewer

Review code changes for security, performance, maintainability, and correctness.

Updated Apr 6, 2026
One-click install
npx skills add https://github.com/isiou/AI-Library-VLLM --skill code-reviewer-isiou
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/isiou/AI-Library-VLLM/tree/main/.gemini/skills/code-reviewer
Command: npx skills add https://github.com/isiou/AI-Library-VLLM --skill code-reviewer-isiou

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you evaluate code changes quickly and thoroughly, reducing bugs, security risks, performance regressions, and maintainability problems before they reach production.

Core Features & Use Cases

  • Security Review: Check authentication, authorization, input validation, secrets handling, and common OWASP vulnerabilities.
  • Quality and Maintainability Review: Assess code structure, readability, consistency, complexity, and refactoring opportunities.
  • Performance and Reliability Review: Spot inefficient queries, resource leaks, scalability issues, and weak error handling.
  • Use Case: Use this Skill when reviewing a pull request, auditing a service configuration, or preparing feedback on a risky production change.

Quick Start

Ask the code-reviewer skill to review your diff or change summary and return prioritized feedback with clear fixes.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a pull request for security and performance risks?

You can review a pull request by analyzing the diff for security vulnerabilities, performance regressions, and maintainability issues. This provides structured feedback with severity rankings and actionable remediation steps to resolve risks before production deployment.

What is static analysis in the context of a code review?

Static analysis in a code review is the mechanism of evaluating code changes without execution to detect correctness and security flaws. It aligns manual review with automated checks to assess structure, readability, and common OWASP vulnerabilities across modern codebases.

Can I use code review techniques for auditing service configurations?

Yes, you can use code review techniques for auditing service configurations. This approach assesses production-risk factors like secrets handling and input validation, returning prioritized feedback and verification guidance to ensure configuration changes are safe to deploy.

What's the best way to assess refactoring opportunities and code complexity?

The best way to assess refactoring opportunities is to perform a maintainability review that checks code structure, readability, and consistency. This identifies complex areas and provides actionable remediation guidance to improve overall code quality before shipping.

How do I spot inefficient queries and resource leaks during a code review?

To spot inefficient queries and resource leaks, conduct a performance and reliability review of your code changes. This process identifies scalability issues and weak error handling, returning prioritized feedback to resolve potential production risks.