Can this skill review specific GitHub Pull Requests?

Yes, you can initiate a PR review by providing the PR number, for example: /code-review pr 123.

Is this skill compatible with the PDCA methodology?

Yes, it is specifically designed for the 'Check' phase of the PDCA cycle to verify quality after implementation.

How does confidence-based filtering work?

The code-analyzer agent assigns a confidence score to findings; issues with 90%+ confidence are always shown, while low-confidence suggestions (<70%) are hidden to reduce false positives.

What kind of security vulnerabilities does it look for?

The skill inspects code for common vulnerabilities including XSS, CSRF, SQL Injection patterns, and exposure of sensitive information.

AI Code Reviewer

Name: AI Code Reviewer
Author: popup-studio-ai

bypopup-studio-ai

•

237

•

安全与测试

Automates comprehensive code analysis to detect bugs, security vulnerabilities, and quality issues with actionable feedback.

The AI Code Reviewer skill leverages the bkit code-analyzer agent to perform deep-dive inspections of your codebase across four critical dimensions: quality, bugs, security, and performance. Integrated into the PDCA (Plan-Do-Check-Act) methodology as a 'Check' phase tool, it provides structured reports that categorize issues by severity and uses confidence-based filtering to ensure developers focus on high-impact fixes. Whether you are reviewing a single file, a full directory, or a Pull Request, this skill enforces best practices and identifies risks like XSS patterns, memory leaks, and complex logic that requires refactoring.

主要功能

01237 GitHub stars

02Multilingual trigger support for global development teams

03Confidence-based filtering to prioritize high-certainty issues over noise

04Support for file-level, directory-level, and Pull Request (PR) reviews

05Comprehensive analysis of code quality, security, and performance bottlenecks

06Structured Markdown reporting with Critical, Major, and Minor issue classification

使用场景

01Automating security audits for XSS, CSRF, and SQL Injection patterns

02Pre-deployment quality checks to verify error handling and type safety

03Accelerating the PR review process by providing initial automated feedback

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add popup-studio-ai/bkit-claude-code code-review

For use in Claude.ai and ChatGPT

Download Skill