code-reviewer

Review source code for security, performance, and best-practice issues.

190|27|Updated Apr 22, 2026
One-click install
npx skills add https://github.com/linxuan-sys/opencode-skills-chinese --skill code-reviewer-linxuan-sys
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/linxuan-sys/opencode-skills-chinese/tree/main/code-reviewer
Command: npx skills add https://github.com/linxuan-sys/opencode-skills-chinese --skill code-reviewer-linxuan-sys

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

它帮助你在合并代码之前系统性识别安全漏洞、性能隐患和最佳实践问题,从而降低缺陷进入生产环境的风险并提升代码质量。

Core Features & Use Cases

  • 安全审查:重点检查 SQL 注入、XSS、不安全的数据处理以及硬编码密钥或凭证等高风险点。
  • 性能评估:识别不必要的循环与冗余逻辑、潜在内存泄漏,以及缺失的缓存优化机会。
  • 最佳实践检查:覆盖命名清晰度、错误处理合理性、代码文档与 DRY 原则违背等可维护性问题。

Quick Start

将你要审查的代码片段或 PR 内容直接发给代码审查专家,让它按严重等级给出问题定位、修复建议和整体代码质量评分。

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an automated security audit on my source code?

An automated security audit identifies vulnerabilities like SQL injection, XSS, and hardcoded credentials in your source code. It targets high-risk areas to reduce flaws entering production and provides severity levels with concrete remediation steps.

Can I use this for pull request review workflows to catch performance issues?

Yes, pull request review workflows can catch performance issues by identifying unnecessary loops, redundant logic, and potential memory leaks before merging. It analyzes PR content to produce a structured report with severity levels and an overall quality score.

What is the best way to check code quality and best-practice violations?

The best way to check code quality and best-practice violations is reviewing source code for naming clarity, error handling, documentation, and DRY principle adherence. It generates a structured report with specific line references and an overall quality score from 1 to 10.

Does code review detect SQL injection and XSS vulnerabilities?

Yes, code review detects SQL injection and XSS vulnerabilities by specifically targeting unsafe data processing and hardcoded keys during the security audit phase. It flags these critical issues with specific code-segment references and concrete remediation steps.

How do I get a structured report for code quality checks?

To get a structured report for code quality checks, submit your code snippet for review. The process evaluates security, performance, and best practices, outputting a report with severity levels (Critical/High/Medium/Low), line references, and a 1 to 10 quality score.