How do I trigger the Code Review skill?

You can trigger the skill by using natural language commands like 'review this code', 'check this PR', or 'is this code safe?' when sharing code snippets or files.

Does it work with existing version control workflows?

Yes, it is designed to analyze diffs and pull requests, making it easy to integrate into your standard Git or PR workflow.

What security vulnerabilities does it check for?

It scans for a wide range of issues including SQL injection, XSS, CSRF, hardcoded secrets, insecure deserialization, and path traversal.

Does it only provide negative feedback?

No, the output format specifically includes positive observations alongside identified issues to provide a balanced review.

Will it provide specific locations for the issues found?

Yes, the skill provides specific file and line references for every actionable finding so you know exactly where to make changes.

AI Code Reviewer

Name: AI Code Reviewer
Author: lilbom32

bylilbom32

0•

协作工具

Performs deep structural audits of source code to identify security vulnerabilities, performance bottlenecks, and maintainability improvements.

The Code Review skill acts as an automated senior developer, providing comprehensive analysis of pull requests, diffs, or individual files. It systematically evaluates code across four critical dimensions: security (detecting vulnerabilities like SQLi and exposed secrets), performance (identifying N+1 queries and leaks), correctness (catching edge cases and race conditions), and maintainability (ensuring clean code and documentation). By delivering prioritized, actionable feedback with specific line references, it helps engineering teams maintain high code quality standards and reduce manual review overhead.

主要功能

01Structured output with prioritized findings and specific file/line references

02Multi-dimensional auditing covering security, performance, correctness, and maintainability

03Security scanning for common vulnerabilities including XSS, CSRF, and hardcoded credentials

04Correctness checking for edge cases, null handling, and concurrency issues

05Performance analysis to identify algorithmic complexity issues and resource leaks

060 GitHub stars

使用场景

01Automated pull request (PR) analysis to streamline the team review process

02Pre-deployment security audits to catch vulnerabilities before they reach production

03Refactoring legacy code by identifying maintainability and logic improvements

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add lilbom32/ketnoitrithuc code-review

For use in Claude.ai and ChatGPT