review

Review branch diffs for code quality and OWASP Top 10 vulnerabilities.

7|4|Updated Feb 8, 2026
One-click install
npx skills add https://github.com/jeremyary/agent-scaffold --skill review-jeremyary
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/jeremyary/agent-scaffold/tree/main/.claude/skills/review
Command: npx skills add https://github.com/jeremyary/agent-scaffold --skill review-jeremyary

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the process of reviewing code changes for both quality and security vulnerabilities, ensuring a higher standard of code before it's merged.

Core Features & Use Cases

  • Comprehensive Analysis: Analyzes code diffs for correctness, standards adherence, maintainability, testing coverage, and error handling.
  • Security Vulnerability Detection: Scans for common security risks including injection flaws, broken access control, and hardcoded secrets.
  • Use Case: Before merging a new feature branch, run this Skill to get a detailed report on potential issues, allowing developers to fix them proactively.

Quick Start

Run a combined code quality and security review on the current branch's changes.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review and security vulnerability scanning on git branch changes?

Automate a combined code review and security vulnerability scan by analyzing your current branch's diff against the base branch. This process checks code quality, standards, and OWASP Top 10 risks before generating a unified report with severity levels.

What is the best way to check git code quality and OWASP Top 10 security risks before merging?

Checking git code quality and OWASP Top 10 security risks before merging requires analyzing branch diffs for correctness, maintainability, and injection flaws. A unified report categorizes findings by severity and includes positive feedback to ensure standards.

Can I run a combined code quality and security analysis on my current git diff?

Yes, you can run a combined code quality and security analysis on your current git diff. The review evaluates error handling, testing coverage, and broken access control, outputting a detailed report of potential issues categorized by severity.

Does this automated code review check for hardcoded secrets and broken access control?

Yes, this automated code review checks for hardcoded secrets and broken access control. It scans diffs for common security risks including injection flaws and OWASP Top 10 vulnerabilities, generating a unified report with findings categorized by severity.

How do I get a severity-categorized report for code correctness and maintainability issues?

To get a severity-categorized report for code correctness and maintainability issues, analyze the diff between your current branch and base branch. The resulting unified report categorizes all quality and security findings by severity, including positive feedback.

When do I need to run a comprehensive security and quality assurance review on my code?

You need to run a comprehensive security and quality assurance review before merging a new feature branch. This ensures a higher standard of code by proactively identifying maintainability issues, error handling gaps, and security vulnerabilities.