code-reviewer

Run static analysis and AI review on Python code to produce a severity-rated CODE_REVIEW.md report.

1|Updated Mar 4, 2026
One-click install
npx skills add https://github.com/mk-knight23/AI-Agent-Nanobot --skill code-reviewer-mk-knight23
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/mk-knight23/AI-Agent-Nanobot/tree/main/skills/code-reviewer
Command: npx skills add https://github.com/mk-knight23/AI-Agent-Nanobot --skill code-reviewer-mk-knight23

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates static analysis and AI-driven review to surface bugs, type issues, security vulnerabilities, and style violations before committing or merging Python code, reducing regressions and security risks.

Core Features & Use Cases

  • Combined static and AI analysis: Executes ruff, mypy --strict, and bandit -ll alongside an AI review pass to catch style problems, type errors, security issues, and logic/design faults.
  • CI and pre-merge enforcement: Produces a severity-rated CODE_REVIEW.md report and supports strict exit codes for use in CI pipelines or pre-commit hooks to block unsafe merges.
  • Flexible inputs: Operates on individual files, directories, or git diffs for local checks, automated CI runs, or manual pre-merge reviews. Use this Skill to run a full review on a feature branch diff and generate prioritized fixes before merging.

Quick Start

Ask Nanobot to run a strict code review on the src/ directory and produce a CODE_REVIEW.md report.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Python code review for bugs and security vulnerabilities?

You can automate Python code review by running static analysis and AI-driven checks on files, directories, or git diffs to identify bugs, type errors, and security vulnerabilities before merging.

Can I enforce strict type checking and security scans in a CI pipeline?

Yes, you can enforce strict type checking and security scans in a CI pipeline by running mypy --strict and bandit -ll, using strict exit codes to block unsafe merges.

What is the best way to catch type errors and security issues before committing Python code?

The best way to catch type errors and security issues before committing Python code is to apply combined static analysis and AI review on git diffs to surface style problems, vulnerabilities, and logic faults.

Does this static analysis workflow support ruff, mypy, and bandit?

Yes, this static analysis workflow supports ruff, mypy --strict, and bandit -ll, executing them alongside an AI review pass to catch style problems, type errors, and security issues.

How do I generate a severity-rated code review report for a feature branch?

To generate a severity-rated code review report for a feature branch, run a full review on the git diff to produce a CODE_REVIEW.md report containing prioritized fixes before merging.