code-reviewer

Identify maintainability, performance, and security issues in recently edited source code.

3|1|Updated Dec 3, 2025
One-click install
npx skills add https://github.com/Probably-Group/Dev-AID --skill code-reviewer-probably-group
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/Probably-Group/Dev-AID/tree/main/.dev-aid/skills/core/code-reviewer
Command: npx skills add https://github.com/Probably-Group/Dev-AID --skill code-reviewer-probably-group

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The code-reviewer skill reduces the risk of shipping low-quality or unsafe code by catching common maintainability, performance, and security issues early during development.

Core Features & Use Cases

  • Real-time lightweight review on save: Flags issues when you save files or complete edits so feedback arrives while the context is still fresh.
  • Maintainability checks: Detects long functions, deep nesting, duplicated code, magic numbers, and potential God-class patterns.
  • Security quick wins: Highlights likely SQL injection and XSS risks, missing authentication checks, hardcoded secrets, and weak error handling.
  • Performance signals: Identifies N+1 query patterns and other blocking or unnecessary computation patterns.

Quick Start

Ask the AI to run the code-reviewer checks on the files you just edited and summarize the top non-blocking suggestions with file locations.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run code review checks on recently edited files?

To run code review checks, ask the AI to review your recently edited source code. It analyzes the changes and provides lightweight, non-blocking suggestions with file locations for maintainability, performance, and security issues.

What is an N+1 query pattern and how do I detect it during development?

An N+1 query pattern is a performance issue where database queries execute repeatedly in a loop. This skill detects N+1 query patterns and other unnecessary computation patterns in your source code during file save events.

How do I detect SQL injection and XSS risks in my source code?

You can detect SQL injection and XSS risks by running this skill on your edited files. It highlights likely security vulnerabilities, missing authentication checks, and hardcoded secrets to provide safe handling guidance.

Can I get real-time feedback on code smells when I save a file?

Yes, you can get real-time feedback on code smells when saving a file. The skill flags maintainability issues like long functions, deep nesting, and magic numbers on file save and edit-complete moments.

Does static analysis for code quality check for missing error handling?

Yes, static analysis for code quality checks for missing error handling. It produces lightweight suggestions that emphasize required error handling, input validation, and safe handling guidance for recently edited source code.

When should I not use non-blocking code suggestions?

You should not rely solely on non-blocking code suggestions when you need formal security audits or deep architectural reviews, as this skill focuses on quick wins, common smells, and lightweight risk detection during active development.