quality-review

Evaluate code quality, security, maintainability, and performance beyond specifications.

25|7|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/xoai/sage --skill quality-review-xoai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: quality-review
Source: https://github.com/xoai/sage/tree/main/core/capabilities/review/quality-review
Command: npx skills add https://github.com/xoai/sage --skill quality-review-xoai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the need to ensure code is not just functional, but also well-crafted, secure, maintainable, and performant, going beyond basic spec compliance.

Core Features & Use Cases

  • Comprehensive Code Evaluation: Assesses readability, error handling, security vulnerabilities, performance bottlenecks, and adherence to conventions.
  • Quality Gates: Acts as a critical quality gate (Gate 3) in the development pipeline, ensuring code is built to high standards.
  • Use Case: After a feature is implemented and passes initial reviews, use this Skill to perform a deep dive into the code's quality, identifying potential security risks or performance issues before deployment.

Quick Start

Use the quality-review skill to evaluate the recently implemented code for quality and security.

Frequently Asked Questions about quality-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit and code review beyond basic spec compliance?

To perform a security audit and code review beyond spec compliance, evaluate readability, error handling, vulnerabilities, and performance bottlenecks. This requires implementation details, codebase context, and a constitution to ensure adherence to best practices.

What does a comprehensive code quality evaluation cover for maintainability?

A comprehensive code quality evaluation for maintainability covers readability, error handling, security vulnerabilities, performance bottlenecks, and convention adherence, ensuring code is well-crafted and secure before deployment.

When do I need to run a deep performance analysis on my codebase?

You need to run a deep performance analysis after a feature is implemented and passes initial reviews. This acts as a critical quality gate to identify performance bottlenecks and security risks before deployment.

What do I need to provide to assess code readability and security vulnerabilities?

To assess code readability and security vulnerabilities, you need to provide implementation details, codebase context, and a constitution. This ensures adherence to project standards and best practices during evaluation.

Can I use this to check convention adherence and clean code standards?

Yes, you can use it to check convention adherence and clean code standards. It evaluates code quality, security, maintainability, and performance by analyzing readability, error handling, and convention compliance against a project constitution.

Why does code review require a constitution and codebase context?

Code review requires a constitution and codebase context to ensure adherence to best practices and project standards. This allows the evaluation to accurately assess maintainability, security vulnerabilities, and performance bottlenecks.