reviewer

Score Python code across complexity, security, maintainability, test coverage, and performance.

4|Updated Aug 19, 2025
One-click install
npx skills add https://github.com/wtthornton/HomeIQ --skill reviewer
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: reviewer
Source: https://github.com/wtthornton/HomeIQ/tree/main/.claude/skills/reviewer
Command: npx skills add https://github.com/wtthornton/HomeIQ --skill reviewer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides objective metrics and actionable feedback for code reviews, helping teams measure quality and quickly resolve issues related to security, maintainability, and performance.

Core Features & Use Cases

  • Code Scoring: Five metrics (complexity, security, maintainability, test coverage, and performance) to quantify quality.
  • Quality Tools: Integrates Ruff, mypy, Bandit, jscpd, and pip-audit for fast, reliable analysis.
  • Context7 Integration: Looks up library docs to verify usage and security requirements during reviews.
  • Actionable Feedback: Delivers concrete recommendations with code examples.

Quick Start

Review a file by running a standard review on src/main.py, then apply suggested improvements and re-run tests.

Frequently Asked Questions about reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform objective code reviews with automated scoring?

Code review automation uses metrics across complexity, security, maintainability, test coverage, and performance to score Python projects objectively. This Skill integrates Ruff, mypy, Bandit, jscpd, and pip-audit to detect issues fast and deliver actionable feedback with code examples for quality gates.

Can I use static analysis tools like Ruff and Bandit together for Python security scanning?

Yes, parallel execution of Ruff, mypy, Bandit, and pip-audit combines linting, type checking, security scanning, and dependency auditing in a single review. This Skill coordinates these tools to identify security vulnerabilities, code quality issues, and outdated packages simultaneously.

What's the best way to detect code duplication and security issues in Python projects?

Duplication detection with jscpd combined with security scanning via Bandit and dependency auditing through pip-audit provides comprehensive coverage. This Skill structures findings with Context7 library documentation lookups to verify secure usage patterns.

How do I integrate security scanning with code quality metrics for Python codebases?

Security scanning integrates with complexity, maintainability, and performance metrics through unified scoring and structured outputs. This Skill leverages Bandit for vulnerability detection, mypy for type safety, and contextual feedback to satisfy both human review and RAG pipeline requirements.

Does static analysis support actionable feedback with code examples?

Yes, static analysis output becomes actionable through concrete recommendations and code examples tied to specific issues. This Skill transforms tool findings into structured data suitable for developers to remediate problems and systems to process programmatically.

What are the limitations of automated code review scoring?

Automated scoring quantifies measurable dimensions—complexity, security, maintainability, coverage, and performance—but requires human judgment on architectural tradeoffs and business logic. This Skill excels at flag-raising and trend detection; final decisions rest with code reviewers.