review

Analyze pull request code diffs for security and quality issues.

Updated Jun 19, 2026
One-click install
npx skills add https://github.com/moogieon/kadera --skill review-moogieon
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/moogieon/kadera/tree/main/.claude/skills/gstack/review
Command: npx skills add https://github.com/moogieon/kadera --skill review-moogieon

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pylint, bandit, sqlparse, pypdf2, pdfplumber, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the code review process, identifying potential security vulnerabilities, ensuring code quality and maintainability, and providing efficient feedback on pull requests.

Core Features & Use Cases

  • Automated Code Review: Analyzes diffs against the base branch for SQL safety, LLM trust boundary violations, conditional side effects, and other structural issues.
  • Security Checks: Detects common security vulnerabilities like SQL injection, race conditions, and shell injection.
  • Quality Assurance: Identifies issues related to code quality, maintainability, and performance.
  • Use Case: Use this Skill to review a pull request before merging it into the main branch, ensuring the code meets the necessary standards.

Quick Start

Run the 'review' skill with the command 'review this PR'.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate PR code reviews for security vulnerabilities and quality?

Automated PR code review analyzes code diffs against the base branch to detect SQL injection, shell injection, and race conditions. It ensures security and maintainability by applying static analysis and security checks to pull requests.

What specific security checks are performed during automated code review?

Automated code review detects common security vulnerabilities like SQL injection, shell injection, and race conditions. It also identifies LLM trust boundary violations and conditional side effects within the code diffs.

Do I need Python libraries like pylint and bandit to review pull requests?

Yes, reviewing pull requests requires Python libraries including pylint, bandit, sqlparse, pypdf2, and pdfplumber. These dependencies enable static analysis and security checks during the automated review process.

Can I use automated code review to check SQL safety in pull requests?

Yes, automated code review checks SQL safety by analyzing code diffs against the base branch. It uses sqlparse to identify potential SQL injection vulnerabilities and ensure safe query execution.

What's the best way to ensure code maintainability before merging a pull request?

The best way to ensure maintainability is running an automated review that identifies quality, performance, and structural issues in code diffs. This process enforces quality standards prior to merging into the main branch.