CodeReview

Audits JavaScript and Python files for common code and security defects.

1|1|Updated Mar 1, 2026
One-click install
npx skills add https://github.com/RooseveltAdvisors/claude-agent-stack --skill codereview
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: CodeReview
Source: https://github.com/RooseveltAdvisors/claude-agent-stack/tree/main/skills/CodeReview
Command: npx skills add https://github.com/RooseveltAdvisors/claude-agent-stack --skill codereview

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of reviewing code for common anti-patterns, security vulnerabilities, and project-specific violations, ensuring higher code quality and reducing manual review time.

Core Features & Use Cases

  • Anti-Pattern Detection: Identifies and flags problematic code constructs like silent exceptions and raw datetime usage.
  • Security Audits: Scans for security risks such as unsanitized input and missing file locks.
  • Transaction Safety: Verifies the correct implementation of database transaction handling to prevent data corruption.
  • Use Case: When a developer submits a pull request, this Skill can be invoked to perform an initial automated audit, catching potential issues before a human reviewer even looks at the code.

Quick Start

Use the CodeReview skill to review the file 'app/utils/helpers.py' for anti-patterns.

Frequently Asked Questions about CodeReview

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review for Python and JavaScript files?

Automate security audits for Python and JavaScript by scanning for unsanitized input, missing file locks, and SQLite transaction safety issues. The review uses grep and static analysis to flag vulnerabilities and project-specific violations before human review.

What are common anti-patterns found during a Python security audit?

Common anti-patterns detected during a Python security audit include silent exceptions, raw datetime calls, and unsanitized IDs. Static analysis identifies these problematic constructs to prevent silent failures and potential data vulnerabilities.

Can I check SQLite transaction safety and missing file locks automatically?

Yes, you can check SQLite transaction safety and missing file locks automatically. Static analysis scans the codebase to verify correct database transaction handling and flags operations lacking proper file locking mechanisms to prevent data corruption.

What is the best way to detect silent exceptions in JavaScript code?

The best way to detect silent exceptions in JavaScript code is by running an automated static analysis. This review process scans source files to pinpoint and report empty catch blocks or ignored promise rejections automatically before deployment.

Does automated code review work for finding alert and confirm usage in JavaScript?

Yes, automated code review works for finding alert and confirm usage in JavaScript. The static analysis process scans the codebase to identify and flag these specific project violations alongside other security risks and anti-patterns.

When should I use static analysis for bug detection over manual review?

Use static analysis for bug detection when a developer submits a pull request to perform an initial automated audit. This catches potential issues like raw datetime calls and unsanitized IDs early, reducing manual review time before a human reviewer evaluates the code.