skills.rest
softspark
softsparkCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

review

Analyze git diffs and report quality, security, and correctness issues as JSON.

161|21|Updated Mar 26, 2026
Search Tags:#automation#security#quality#review#diff#code-review#risk-analysis
One-click install
npx skills add https://github.com/softspark/ai-toolkit --skill review-softspark
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review
Source: https://github.com/softspark/ai-toolkit/tree/main/app/skills/review
Command: npx skills add https://github.com/softspark/ai-toolkit --skill review-softspark

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Automates code reviews to identify quality, security, and correctness issues in code changes.

Core Features & Use Cases

  • Automated diff analysis to surface risk hotspots and actionable improvements.
  • Security-focused checks for common vulnerabilities, secrets, and insecure patterns.
  • Structured risk reporting with prioritized recommendations for developers and reviewers.

Quick Start

Analyze the latest commit diff to receive a comprehensive risk and quality assessment.

Frequently Asked Questions about review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review for a git diff to find security risks?▼

Automated code review analyzes added and modified lines in a git diff to identify security vulnerabilities, potential secrets, and insecure patterns. It categorizes risk levels and outputs a structured JSON report detailing files, hotspots, and prioritized recommendations.

Can I use automated code review on staged changes across different programming languages?▼

Automated code review supports analyzing staged changes across multiple programming languages. It evaluates code quality, security, and correctness by identifying risk hotspots and generating a structured JSON report with actionable recommendations for developers.

What is the best way to detect potential secrets and insecure patterns in a pull request?▼

Detecting potential secrets and insecure patterns in a pull request is best handled by automated diff analysis. It scans added and modified lines for security vulnerabilities and style issues, then outputs a structured JSON report with prioritized recommendations.

Does automated code review check for performance and style issues as well as correctness?▼

Automated code review checks for performance, style, and correctness issues in code changes. It evaluates added and modified lines to categorize risk and produces a structured JSON report that highlights files, hotspots, and actionable improvements for reviewers.

How do I get structured risk reporting for my latest commit diff?▼

Structured risk reporting for your latest commit diff is generated by analyzing added and modified lines for quality and security issues. The automated review detects potential secrets, categorizes risk, and outputs a JSON report detailing files, hotspots, and recommendations.

When do I need automated code review for my code changes?▼

You need automated code review when you want to surface quality, security, and correctness issues in code changes before merging. It automates diff analysis to identify risk hotspots, detect potential secrets, and provide structured, prioritized recommendations for developers and reviewers.

Related Skills

Explore More Software Engineering Skills→
FabienDehopreFabienDehopre

commit-message-storyteller

Generate Conventional Commits messages from git diffs and staged changes.

Community
Intermediate
rakhnianskii9rakhnianskii9

perf-profile

Profile CPU, memory, and rendering paths in Godot 4.x projects.

Community
Advanced
aarushlohitaarushlohit

zen-review

Review pull request changes for correctness, security, performance, and quality.

Community
Advanced
ollieb89ollieb89

sast-configuration

Configures SAST tools like Semgrep, SonarQube and CodeQL for automated vulnerability detection in CI/CD pipelines.

Community
Advanced