yao-codereview-hskill

Analyze code snippets for quality, security, performance, and best practices.

1.3k|143|Updated Apr 6, 2026
One-click install
npx skills add https://github.com/yaojingang/yao-open-skills --skill yao-codereview-hskill
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: yao-codereview-hskill
Source: https://github.com/yaojingang/yao-open-skills/tree/main/skills/security-test-hskills/yao-codereview-hskill
Command: npx skills add https://github.com/yaojingang/yao-open-skills --skill yao-codereview-hskill

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and templates (resource) components.

What problem does it solve?

This Skill provides professional code review services, checking code quality, security vulnerabilities, performance issues, and best practices, supporting multiple programming languages and frameworks.

Core Features & Use Cases

  • Multi-dimensional Code Quality Assessment: Evaluates code quality from various dimensions.
  • Security Vulnerability Detection: Identifies security risks in the code.
  • Performance Issue Identification: Discovers performance bottlenecks.
  • Best Practice Suggestions: Offers recommendations for code improvement.
  • Fix Example Code: Provides example code for fixing issues.
  • Use Case: Ideal for Pull Request code reviews, code refactoring assessments, security audits, and new developer code guidance.

Quick Start

Review the following code, focusing on security:

def login(username, password):
    query = f"SELECT * FROM users WHERE name='{username}' AND pass='{password}'"
    return db.execute(query)

Frequently Asked Questions about yao-codereview-hskill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for security vulnerabilities and performance issues?

Code review for security vulnerabilities and performance issues requires analyzing code snippets to identify potential risks, checking quality, and suggesting best practice improvements across multiple programming languages and frameworks.

Can I use automated code review for pull requests and security audits?

Automated code review supports pull request assessments, security audits, code refactoring evaluations, and new developer code guidance by evaluating code quality from various dimensions and providing fix example code.

What is the best way to detect security vulnerabilities in my codebase?

The best way to detect security vulnerabilities involves identifying security risks in the code through multi-dimensional quality assessment, focusing on specific vulnerabilities like SQL injection, and offering best practice recommendations for fixes.

Does code review work with multiple programming languages and frameworks?

Code review works with multiple programming languages and frameworks, checking code quality, security vulnerabilities, performance issues, and best practices without requiring specific external dependencies.

How do I identify performance bottlenecks when refactoring code?

To identify performance bottlenecks during code refactoring, a code review discovers performance issues by evaluating code quality from various dimensions and provides example code to fix the identified problems.

Why should I not rely solely on manual code review for security audits?

Manual code review may miss security vulnerabilities and performance issues, whereas an automated approach evaluates multi-dimensional code quality, identifies risks, and provides best practice suggestions with fix example code.