code-reviewer

Analyze codebases for security vulnerabilities and logic errors with structured findings.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/sahajamoth/apex --skill code-reviewer-sahajamoth
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/sahajamoth/apex/tree/main/.agents/skills/code-reviewer
Command: npx skills add https://github.com/sahajamoth/apex --skill code-reviewer-sahajamoth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Developers often miss security vulnerabilities, logic errors, and quality issues during code reviews. This Skill provides a structured, expert review workflow to identify and document defects before they reach production.

Core Features & Use Cases

  • Automated vulnerability detection: detects patterns like SQL injection, XSS, command injection, and path traversal.
  • Logic & quality checks: surfaces race conditions, null dereferences, and gaps in test coverage.
  • Actionable, structured reporting: produces findings with file paths, line numbers, severities, and concrete remediation steps.
    • Use Case: In a PR, identify an unsanitized input used in a database query and suggest a parameterized query.
  • Traceable reasoning: always explains the rationale behind each finding to support auditability.

Quick Start

Run a repository through the reviewer to surface security issues, logic errors, and quality improvements in a single pass.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find security vulnerabilities and logic errors in a codebase?

To find security vulnerabilities and logic errors in a codebase, you can run an automated code review to detect patterns like SQL injection, XSS, race conditions, and null dereferences. This generates a structured report with file paths, line numbers, severities, and remediation steps.

What is the best way to generate a structured code review report with line numbers?

Generating a structured code review report with line numbers involves analyzing your repository for security vulnerabilities and quality issues. The output provides file paths, specific line numbers, severity levels, and actionable recommendations to fix defects before production.

How does automated vulnerability detection work for SQL injection and XSS?

Automated vulnerability detection for SQL injection and XSS works by scanning the codebase for unsanitized inputs and unsafe patterns. It identifies command injection and path traversal risks, explaining the rationale behind each finding to support auditability.

Can I run static analysis to check for race conditions and null dereferences across different programming languages?

Yes, you can run static analysis to check for race conditions and null dereferences across different programming languages. The review process applies universally across repositories to surface logic errors and gaps in test coverage.

Does automated code review provide actionable remediation steps for identified defects?

Yes, automated code review provides actionable remediation steps for identified defects. It produces concrete recommendations, such as suggesting parameterized queries for unsanitized database inputs, alongside traceable reasoning for auditability.