review

Automate code reviews for security, quality, and silent-failure detection.

1|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/matteobortolazzo/claude-tools --skill review-matteobortolazzo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/matteobortolazzo/claude-tools/tree/main/ccflow/skills/review
Command: npx skills add https://github.com/matteobortolazzo/claude-tools --skill review-matteobortolazzo

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill automates code reviews to identify security issues, quality problems, and silent failures, and can be used on standalone code or during pull requests.

Core Features & Use Cases

  • Security-focused review: detects vulnerabilities, misconfigurations, and policy violations.
  • Quality checks: enforces coding standards, detects code smells, and gauges test coverage.
  • Use cases include reviewing PRs, pre-merge checks, and auditing legacy code for risks.

Quick Start

Run the review on your current working tree or a PR to generate a consolidated report.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security and quality code reviews for a pull request?

Automated code reviews for pull requests are performed by analyzing the diff to detect security vulnerabilities, quality issues, and silent failures, producing a consolidated report for pre-merge checks.

Can I run automated code review checks on a local branch before merging?

Yes, automated code review checks can run directly on local branches or working trees to provide contextual analysis and identify security risks before submitting a pull request.

Does automated code review detect silent failures and misconfigurations in legacy code?

Automated code review audits legacy code to detect silent failures, security vulnerabilities, and misconfigurations, enforcing coding standards and identifying policy violations across the codebase.

What is the best way to integrate code review automation into a CI pipeline?

Code review automation can be integrated into CI pipelines to run standalone checks or PR reviews, providing contextual analysis and a consolidated report on security and code quality during the build process.