project-reviewer

Review Streamlit code changes for correctness, design, security, and performance.

1|Updated Dec 10, 2025
One-click install
npx skills add https://github.com/LinusConradM/feeding_america --skill project-reviewer-linusconradm
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: project-reviewer
Source: https://github.com/LinusConradM/feeding_america/tree/main/.claude/skills/project-reviewer
Command: npx skills add https://github.com/LinusConradM/feeding_america --skill project-reviewer-linusconradm

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps teams avoid shipping broken, insecure, or non-compliant code by providing a structured, repeatable review process for changes to the GP Food Basket Streamlit platform.

Core Features & Use Cases

  • Correctness checks: Validate data handling, Streamlit session state interactions, edge cases, and expected filter behavior.
  • Design system compliance: Ensure UI elements follow the existing theme, components, typography, and Plotly layout conventions.
  • Responsive and performance review: Confirm mobile-safe layouts and that heavy work is cached and not repeated unnecessarily.
  • Security screening: Detect unsafe HTML usage, missing secret handling, injection vectors, and XSS risks.
  • Review output reporting: Produces a structured verdict with critical/warning/suggestion findings and concrete fix recommendations.

Quick Start

Ask the AI to review your PR diff and produce a structured report with a verdict and actionable fixes.

Frequently Asked Questions about project-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a Streamlit PR diff for security and design system compliance?

A PR review for Streamlit checks code correctness, design system compliance, responsive layouts, and security screening. It validates data handling, session state interactions, and theme components while screening for unsafe HTML usage, injection vectors, and XSS risks.

What is the best way to audit Streamlit session state interactions in a pull request?

Auditing Streamlit session state requires a code review process that validates expected filter behavior, edge cases, and data integrity. This approach catches state management logic errors and ensures correct data handling before the code merge.

Can I use automated code review to detect unsafe HTML and XSS risks in Streamlit dashboards?

Yes, automated code review detects unsafe HTML usage, missing secret handling, injection vectors, and XSS risks in Streamlit dashboards. It produces a structured report with severity ratings and concrete fix recommendations for the identified security vulnerabilities.

Does PR review check Streamlit performance issues like uncached heavy work?

Yes, PR review checks Streamlit performance by confirming that heavy work is cached and not repeated unnecessarily. It also validates mobile-safe responsive UI layouts to ensure efficient dashboard rendering and data loading across devices.

How do I get a structured report with severity ratings from a diff audit?

You get a structured report from a diff audit by requesting a PR review on your code changes. The output produces a verdict with critical, warning, and suggestion findings alongside concrete fix recommendations for each identified issue.