How does the Code Reviewer skill find bugs?

It uses advanced pattern matching via Grep and Glob tools combined with AI analysis to identify common anti-patterns, security flaws, and logic errors.

Can I use this for security audits?

Yes, the skill includes a specific security checklist covering SQL injection, XSS prevention, and exposed secret detection.

Does it support different programming languages?

Yes, as an AI-powered tool, it can review code across most modern programming languages by analyzing syntax and logic patterns.

What kind of feedback does it provide?

It generates structured markdown reports categorized by Critical (must fix), Warning (should fix), and Suggestions (best practices) for clear prioritization.

Is it compatible with open-source alternatives?

Yes, while designed for Claude Code, this extension is compatible with opencode and similar environments.

Code Reviewer

Name: Code Reviewer
Author: nodnarbnitram

bynodnarbnitram

•

安全与测试

Performs comprehensive, multi-dimensional code reviews focusing on security, performance, and maintainability within the Claude Code environment.

关于

The Code Reviewer skill empowers Claude to act as an automated senior engineer by systematically auditing source code for potential vulnerabilities, architectural flaws, and maintainability issues. By leveraging tools like Grep and Glob, it navigates entire repositories to identify problematic patterns, ensuring that Pull Requests and code changes meet rigorous standards for security, error handling, and logic. It provides structured, actionable feedback categorized by severity, helping developers catch critical bugs and performance bottlenecks before they reach production.

主要功能

Deep repository scanning using Grep and Glob tools to find cross-file patterns
1 GitHub stars
Performance bottleneck identification and optimization suggestions
Automated code quality checks against DRY principles and naming conventions
Structured feedback reporting categorized by Critical, Warning, and Suggestion levels
Comprehensive security auditing for SQL injection, XSS, and exposed secrets

使用场景

Pre-commit sanity checks to catch bugs before opening a Pull Request
Security audits to identify vulnerabilities like unsanitized inputs or hardcoded keys
Code refactoring assistance to improve maintainability and adherence to best practices

关于

主要功能

Deep repository scanning using Grep and Glob tools to find cross-file patterns
1 GitHub stars
Performance bottleneck identification and optimization suggestions
Automated code quality checks against DRY principles and naming conventions
Structured feedback reporting categorized by Critical, Warning, and Suggestion levels
Comprehensive security auditing for SQL injection, XSS, and exposed secrets

使用场景

Pre-commit sanity checks to catch bugs before opening a Pull Request
Security audits to identify vulnerabilities like unsanitized inputs or hardcoded keys
Code refactoring assistance to improve maintainability and adherence to best practices