Can it detect security vulnerabilities?

Yes, it identifies common security patterns such as unsanitized user input, hardcoded credentials, and incorrect use of cryptographic libraries.

How does this differ from a standard linter?

Unlike linters that focus on syntax and formatting, this skill analyzes architectural logic, security risks, and behavioral testing to provide senior-level engineering insights.

Will it comment on every small formatting issue?

No, the skill is specifically configured to skip 'nitpicks' like spacing or bracket placement, focusing exclusively on issues that impact correctness, security, or maintainability.

Does it verify if I have added enough tests?

Yes, it checks for corresponding tests when new features or fixes are introduced and prioritizes tests that validate real behavior over those that only assert on mocks.

Automated Code Review

Name: Automated Code Review
Author: OpenHands

byOpenHands

•

协作工具

Performs high-signal code reviews focusing on security, logic correctness, and architectural readability while filtering out stylistic noise.

The Automated Code Review skill transforms Claude into a senior-level engineer capable of auditing pull requests and merge requests with precision. By prioritizing critical issues like security vulnerabilities, overly complex logic, and insufficient test coverage over minor formatting nits, it provides actionable feedback that improves code quality without clogging workflows with trivial comments. This skill is ideal for maintaining high engineering standards in fast-paced environments where manual review bandwidth is limited, ensuring that every commit is secure, readable, and well-tested.

主要功能

01Noise-reduction filtering to ignore minor style and formatting preferences

0275 GitHub stars

03Security vulnerability detection including SQL injection and hardcoded secrets

04Structured, line-specific feedback with concrete improvement suggestions

05Identification of complex or deeply nested logic requiring refactoring

06Validation of test coverage for new features and critical bug fixes

使用场景

01Auditing legacy codebases for hidden security risks and technical debt

02Ensuring new modules adhere to single-responsibility and clean code principles

03Pre-reviewing pull requests to catch logic bugs before human eyes see them

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add openhands/extensions code-review

For use in Claude.ai and ChatGPT

Download Skill