react-doctor

Scans React codebases for security, performance, and correctness issues with a scored diagnostic report.

Updated Aug 28, 2026

Search Tags:#static analysis #code review #performance #react #diagnostics #security scan #npx

Ready to run

npx skills add https://github.com/trobias/portfolio-nextjs-v2 --skill react-doctor-trobias

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: react-doctor
Source: https://github.com/trobias/portfolio-nextjs-v2/tree/main/.agents/skills/react-doctor
Command: npx skills add https://github.com/trobias/portfolio-nextjs-v2 --skill react-doctor-trobias

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires react-doctor.

What problem does it solve? React codebases accumulate subtle security, performance, correctness, and architecture issues that are easy to miss during manual review. This Skill runs an automated scan after code changes so problems are caught early, before they reach production. ## Core Features & Use Cases - Automated React Auditing: Scans your codebase for security vulnerabilities, performance bottlenecks, correctness bugs, and architecture problems. - Scored Diagnostics: Outputs a 0-100 score with actionable diagnostics so you can measure improvement between runs. - Diff-Aware Review: The --diff flag focuses analysis on recent changes, making it ideal for reviewing a feature or bug fix. - Use Case: After finishing a new React feature, run the scan, fix the reported errors first, then re-run to confirm the score improved before committing. ## Quick Start Ask the assistant to run react-doctor on this React project with verbose diff output and report the issues found.

Frequently Asked Questions about react-doctor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan a React project for security and performance issues?▼

Run npx -y react-doctor@latest . --verbose --diff from your project root. It scans the codebase for security, performance, correctness, and architecture issues and returns a 0-100 score with actionable diagnostics.

What does the react-doctor score mean?▼

The scan outputs a 0-100 score reflecting the overall health of your React codebase across security, performance, correctness, and architecture. Fix reported errors first, then re-run to verify the score improved.

When should I run a React code health scan?▼

Run it after making React changes, when reviewing code, finishing a feature, or fixing bugs. Running it early and repeatedly catches issues before they compound across the codebase.

Does react-doctor require installing dependencies into my project?▼

No. It runs via npx with the -y flag, which fetches and executes the latest react-doctor package without adding it to your project's dependencies.

What are the limitations of automated React code scanning?▼

Automated scans detect common security, performance, and correctness patterns but cannot judge business logic intent or UX decisions. Treat the diagnostics as a review aid and verify fixes with tests and manual review.