skills.rest
WomenDefiningAI
WomenDefiningAIOFFICIAL
Explore all skills by this author →
Website𝕏@womendefiningaiGitHub

code-reviewer

Analyze code changes to identify vulnerabilities, code smells, and performance issues.

9|3|Updated Oct 29, 2025
Search Tags:#code review#performance#OWASP#vulnerability#security audit#DevSecOps#SAST
One-click install
npx skills add https://github.com/WomenDefiningAI/claude-code-skills --skill code-reviewer-womendefiningai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/WomenDefiningAI/claude-code-skills/tree/main/skills/code-reviewer
Command: npx skills add https://github.com/WomenDefiningAI/claude-code-skills --skill code-reviewer-womendefiningai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Manual code reviews are slow, inconsistent, and often miss critical security or performance issues, leading to technical debt and vulnerabilities in production. This skill automates the rigorous review process, ensuring higher code quality and security without human oversight.

Core Features & Use Cases

  • Automated Security & Quality Checks: Integrates OWASP Top 10, SAST tools (SonarQube, Snyk, CodeQL), and code quality standards (ESLint, TypeScript) to catch issues early.
  • Performance Analysis: Detects N+1 queries, inefficient algorithms, and memory leaks to prevent performance bottlenecks.
  • Structured Reports & Recommendations: Generates clear, actionable reports with severity classifications and specific code-level fixes, enabling 92% faster vulnerability remediation.
  • Use Case: Before merging a critical pull request, you can ask this skill to perform a comprehensive security audit, ensuring no vulnerabilities slip into production and saving your team countless hours of manual review.

Quick Start

Review this pull request for security, performance, and code quality issues.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security checks for code reviews across TypeScript and JavaScript projects?▼

Automated code review tools analyze pull requests against OWASP Top 10 standards, SAST frameworks like SonarQube and CodeQL, and ESLint rules to catch vulnerabilities, code smells, and security issues before merge, eliminating manual oversight gaps.

Can code review automation detect performance issues like N+1 queries and inefficient algorithms?▼

Yes, automated review tools identify performance bottlenecks including N+1 database queries, O(n²) algorithmic patterns, and memory inefficiencies in code diffs, flagging them with severity classification and remediation guidance.

What's the fastest way to integrate SAST tool results into my pull request workflow?▼

Structured code review automation ingests results from Snyk, SonarQube, and CodeQL, synthesizing them into unified reports with actionable fixes and evidence-rich feedback that developers can apply directly, reducing remediation time by 92%.

How do I ensure consistent security and code quality standards across all pull requests?▼

Automated security audits enforce standardized severity classifications, OWASP compliance checks, and code quality metrics on every diff submission, ensuring no vulnerabilities or performance regressions slip into production.

Do I need to manually review pull requests if I use automated code analysis tools?▼

Automated code review handles systematic vulnerability detection, performance analysis, and quality checks, but human review remains valuable for architectural decisions, business logic validation, and context-specific concerns that static analysis cannot evaluate.

Related Skills

Explore More Software Engineering Skills→
dandudzidandudzi
2

sast-configuration

Automate SAST tool selection, configuration, and CI/CD integration.

Community
Advanced
duanbiao2000duanbiao2000
3

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection.

Community
Advanced
3commas-io3commas-io
4

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection.

Official
Advanced
chicanoandres702chicanoandres702

code-reviewer

Automate code reviews to identify security, performance, and reliability issues.

Community
Advanced