code-reviewer

Analyze code diffs for bugs, security vulnerabilities, and architectural concerns.

Updated May 14, 2026
One-click install
npx skills add https://github.com/nkseth/copilot-dev-skills --skill code-reviewer-nkseth
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/nkseth/copilot-dev-skills/tree/main/skills/code-reviewer
Command: npx skills add https://github.com/nkseth/copilot-dev-skills --skill code-reviewer-nkseth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback. Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues. Invoke for PR reviews, code quality checks, refactoring suggestions, review code, code quality. Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass.

Core Features & Use Cases

  • Thorough PR reviews that surface bugs, security risks, and architectural concerns.
  • Structured, prioritized feedback reports suitable for engineering teams and stakeholders.
  • Use Case: When a PR arrives, automatically generate a comprehensive review with actionable recommendations across correctness, security, and maintainability.

Quick Start

Review a pull request by generating a structured, prioritized code-review report with actionable recommendations.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for security vulnerabilities and bugs in a pull request?

To review code for security vulnerabilities and bugs in a pull request, analyze the code diff to surface SQL injection, XSS risks, and architectural concerns, generating a structured report with prioritized, actionable feedback.

What is the best way to identify refactoring opportunities during a code quality audit?

Identifying refactoring opportunities during a code quality audit involves analyzing files to detect code smells, N+1 queries, and naming issues, producing a prioritized review report for maintainability improvements.

Can I use a single code review pass to check correctness, performance, and maintainability?

Yes, you can use a single broad-scope code review pass to check correctness, performance, maintainability, and test coverage across software projects, delivering concise actionable feedback in one structured report.

Does code review support detecting insecure deserialization and other architectural concerns?

Code review supports detecting insecure deserialization and architectural concerns by analyzing code diffs to identify security vulnerabilities, bugs, and structural issues, yielding a prioritized actionable feedback report.

When do I need a structured code review report for my engineering team?

You need a structured code review report for your engineering team when a pull request arrives and you require comprehensive, actionable recommendations across correctness, security, and maintainability to share with stakeholders.

Are there limitations to broad-scope code reviews compared to specialized security analysis?

Broad-scope code reviews provide general correctness, performance, and maintainability checks but may lack the specialized depth of dedicated security analysis, necessitating complementary security-focused skills for advanced vulnerability detection.