code-reviewer

Review code diffs for security flaws and quality issues.

Updated Nov 22, 2025
One-click install
npx skills add https://github.com/Khamel83/oneshot --skill code-reviewer-khamel83
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/Khamel83/oneshot/tree/main/archive/v9/skills/code-reviewer
Command: npx skills add https://github.com/Khamel83/oneshot --skill code-reviewer-khamel83

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates and standardizes code reviews to catch security issues, improve quality, and provide actionable feedback.

Core Features & Use Cases

  • Checks OWASP top 10, code quality, and provides actionable feedback.
  • Applicable to PR reviews, security checks, and any non-trivial diffs affecting logic or data flow.
  • Produces a structured review using a template for consistent results.

Quick Start

Provide the diff or list of modified files and PR context, and the reviewer will generate a structured code review.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate pull request reviews for security flaws?

Automate pull request reviews by providing code diffs and PR context to generate a structured review. This process identifies OWASP top 10 security vulnerabilities and quality issues through a multi-pass workflow covering safety checks and maintainability.

What is the best way to check code quality in a pull request?

The best way to check code quality in a pull request is using a multi-pass review workflow. This approach evaluates maintainability, tests, documentation, and safety checks to produce a structured output template with a formal checklist for consistent results.

Can I use automated code review for any non-trivial diff affecting logic?

Yes, you can use automated code review for any non-trivial diff affecting logic or data flow. The review process handles security checks and quality evaluation across modified files, providing actionable improvement feedback regardless of the specific PR scope.

How does a multi-pass code review workflow work?

A multi-pass code review workflow works by sequentially loading context, running safety checks for OWASP top 10 vulnerabilities, reviewing maintainability, and evaluating tests and documentation. It concludes by generating a structured output template with a formal checklist.

Do I need to provide PR context for a security check on modified files?

Yes, you need to provide the diff or list of modified files and PR context for a security check. Supplying this input allows the reviewer to accurately identify security flaws, evaluate quality issues, and generate actionable improvement feedback.