code-reviewer

Analyze code diffs and files to identify bugs, vulnerabilities, and code smells.

Updated Apr 15, 2026
One-click install
npx skills add https://github.com/preedep/kham --skill code-reviewer-preedep
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/preedep/kham/tree/main/.claude/skills/code-reviewer
Command: npx skills add https://github.com/preedep/kham --skill code-reviewer-preedep

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback. Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues. Invoke for PR reviews, code quality checks, refactoring suggestions, review code, code quality. Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass.

Core Features & Use Cases

  • Analyze code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns.
  • Produce a structured review report with prioritized, actionable feedback.
  • Use during PR reviews, code quality audits, refactoring opportunities, or general code reviews.

Quick Start

Provide a thorough code review by analyzing diffs, highlighting issues, and producing an actionable report.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities and code smells in a pull request?

To identify security vulnerabilities and code smells in a pull request, analyze code diffs to detect SQL injection, XSS, and N+1 queries. The process produces a structured review report with prioritized, actionable feedback covering correctness, performance, and maintainability.

What is the best way to conduct a broad-scope code quality audit across multiple repositories?

A broad-scope code quality audit across multiple repositories involves analyzing files and diffs to find architectural concerns and naming issues. This approach yields a single-pass review report covering cross-cutting concerns like maintainability and test coverage with actionable feedback.

How do I find refactoring opportunities when reviewing code diffs?

Finding refactoring opportunities when reviewing code diffs requires static analysis to pinpoint code smells and architectural concerns. Analyzing the changes produces a prioritized report highlighting areas for structural improvement and maintainability enhancements.

Does this code review approach detect insecure deserialization and XSS vulnerabilities?

Yes, this code review approach detects insecure deserialization and XSS vulnerabilities by analyzing code diffs and files. It specifically targets these security flaws alongside SQL injection to deliver structured, actionable feedback for remediation.

Can I use a general code review process instead of specialized security analysis for my PR review?

You can use a general code review process for PR reviews to get broad-scope coverage of correctness, performance, and maintainability in a single pass. It complements specialized security analysis by identifying bugs and architectural concerns while producing actionable feedback.