What checks does the Security agent perform?

The Security agent scans for OWASP Top 10 vulnerabilities, hardcoded secrets, SQL injection risks, and XSS issues.

Does it provide specific code fix recommendations?

Yes, for every critical issue or warning found, the tool provides a specific recommendation on how to fix the code.

Can this skill block a merge?

Yes, it identifies critical blockers such as hardcoded secrets, security flaws, or test coverage falling below target thresholds.

How does the QA agent assess code quality?

The QA agent evaluates test coverage, test quality, and edge case handling to ensure the code meets the target stability metrics.

Aura Frog Code Reviewer

Name: Aura Frog Code Reviewer
Author: nguyenthienthanh

bynguyenthienthanh

•

Security & Testing

Automates multi-perspective code reviews to ensure security, performance, and quality standards before merging.

About

Aura Frog Code Reviewer is a specialized Claude Code skill that streamlines the pull request process by deploying four distinct AI agents—Security, Developer, QA, and Performance—to analyze code changes. It automatically identifies vulnerabilities like SQL injection, enforces the KISS principle, monitors test coverage, and flags performance bottlenecks, providing a structured report with actionable fix recommendations and a clear approval decision based on predefined quality gates.

Key Features

Automatic git diff analysis against the main branch
1 GitHub stars
Structured decision-making for approving or requesting changes
Enforcement of quality gates and security standards like OWASP
Comprehensive reporting with critical issues, metrics, and warnings
Multi-agent analysis covering Security, Dev, QA, and Performance

Use Cases

Automated security auditing for secret detection and vulnerability scanning
Standardizing code quality and architectural principles across a development team
Pre-merge quality assurance to catch critical bugs before production

About

Key Features

Automatic git diff analysis against the main branch
1 GitHub stars
Structured decision-making for approving or requesting changes
Enforcement of quality gates and security standards like OWASP
Comprehensive reporting with critical issues, metrics, and warnings
Multi-agent analysis covering Security, Dev, QA, and Performance

Use Cases

Automated security auditing for secret detection and vulnerability scanning
Standardizing code quality and architectural principles across a development team
Pre-merge quality assurance to catch critical bugs before production