code-reviewer

Review pull request diffs against six quality and security categories.

1|1|Updated Nov 25, 2025
One-click install
npx skills add https://github.com/PearlThoughts/CodeCompass --skill code-reviewer-pearlthoughts
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/PearlThoughts/CodeCompass/tree/main/.claude/skills/code-reviewer
Command: npx skills add https://github.com/PearlThoughts/CodeCompass --skill code-reviewer-pearlthoughts

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manual code reviews are time-consuming, inconsistent, and prone to missing critical issues like security vulnerabilities or subtle quality flaws. This Skill automates the systematic assessment of code, ensuring adherence to best practices across multiple dimensions.

Core Features & Use Cases

  • Systematic Quality Checks: Evaluates code against 6 categories: functionality, security (OWASP), code quality (SOLID, DRY), performance, testing, and maintainability.
  • Security Audit: Identifies common vulnerabilities like SQL injection, weak authentication, and sensitive data exposure.
  • Code Quality Enforcement: Checks for readability, complexity, DRY principle, and SOLID principles.
  • Use Case: Automatically review a pull request for security flaws and code quality issues before merging, providing a structured report with actionable feedback.

Quick Start

Use the code-reviewer skill to review the attached pull request diff for security vulnerabilities and code quality issues.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code reviews for pull requests?

Automate code reviews by submitting pull request diffs to systematically evaluate functionality, security, code quality, performance, testing, and maintainability against best practices. The Skill applies a six-category checklist including OWASP security checks, parameterized queries, safe logging, and robust error handling to produce actionable feedback before merging.

What security vulnerabilities does automated code review catch?

Automated code review identifies OWASP vulnerabilities including SQL injection, weak authentication, and sensitive data exposure. It checks for unsafe logging patterns, missing ownership validation, and improper error handling that could expose system details or enable attacks.

Can I use code review automation to enforce SOLID principles and DRY?

Yes. Code review automation evaluates adherence to SOLID principles, DRY (Don't Repeat Yourself), readability, and complexity across your codebase. It provides concrete patterns and examples so teams consistently apply quality standards across modules.

How does systematic code review reduce merge time and inconsistency?

Systematic code review standardizes assessment across six dimensions—functionality, security, quality, performance, testing, maintainability—eliminating manual review gaps and inconsistency. Structured feedback and guardrails accelerate approval cycles by catching issues earlier and consistently.

What's the difference between automated review and manual security audits?

Automated code review applies consistent patterns and checklists across all pull requests, catching common flaws systematically. Security audits dive deeper into threat modeling and compliance; automated review serves as a first-pass filter for routine vulnerabilities and quality issues before specialized review.

Can code review automation work across multiple teams and codebases?

Yes. The six-category framework and best-practice patterns scale across teams and modules. Consistent guidelines ensure all contributors follow the same security, quality, and maintainability standards regardless of team or codebase.