code-reviewer

Featured

Perform thorough code reviews with actionable, prioritized feedback. Use when a user asks to review code, check code quality, find bugs, review a pull request, audit code for issues, or get feedback on implementation. Covers correctness, security, performance, readability, and best practices across languages.

Code & Development 58 stars 6 forks Updated 4 days ago Apache-2.0

Install

View on GitHub

Quality Score: 90/100

Stars 20%
59
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
80
License 10%
100
Description 5%
100

Skill Content

# Code Reviewer ## Overview Perform structured code reviews that identify bugs, security issues, performance problems, and maintainability concerns. Provides prioritized, actionable feedback with specific fix suggestions. ## Instructions When a user asks you to review code, a file, a diff, or a pull request, follow this process: ### Step 1: Understand the context Before reviewing, determine: - What does this code do? (feature, bugfix, refactor) - What language and framework is it using? - Are there tests included? - Is this a full file or a diff/patch? Read surrounding files if needed to understand the broader codebase context. ### Step 2: Review using this checklist Evaluate the code against each category in order of severity: **Correctness (Critical)** - Logic errors, off-by-one mistakes, wrong conditions - Unhandled null/undefined/empty cases - Race conditions or concurrency issues - Incorrect error handling (swallowed exceptions, wrong error types) - Missing input validation **Security (Critical)** - SQL injection, XSS, command injection - Hardcoded secrets, API keys, passwords - Improper authentication/authorization checks - Unsafe deserialization, path traversal - Missing rate limiting on public endpoints **Performance (High)** - N+1 queries in database loops - Unnecessary re-renders in UI components - Missing indexes for frequent queries - Unbounded memory growth (loading entire datasets) - Blocking operations on the main thread **Reliability (High)** - Mi...

Details

Author
TerminalSkills
Repository
TerminalSkills/skills
Created
3 months ago
Last Updated
4 days ago
Language
Shell
License
Apache-2.0

Integrates with

Related Skills

Code & Development Featured

code-reviewer

Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback. Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues. Invoke for PR reviews, code quality checks, refactoring suggestions, review code, code quality. Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass.

9,342 Updated 5 days ago
Jeffallan
Code & Development Featured

security-reviewer

Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance. Use when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security. Invoke for SAST scans, penetration testing, DevSecOps practices, cloud security reviews, dependency audits, secrets scanning, or compliance checks. Produces vulnerability reports, prioritized recommendations, and compliance checklists.

9,342 Updated 5 days ago
Jeffallan
Code & Development Featured

parallel-investigation

Coordinates parallel investigation threads to simultaneously explore multiple hypotheses or root causes across different system areas. Use when debugging production incidents, slow API performance, multi-system integration failures, or complex bugs where the root cause is unclear and multiple plausible theories exist; when serial troubleshooting is too slow; or when multiple investigators can divide root-cause analysis work. Provides structured phases for problem decomposition, thread assignment, sync points with Continue/Pivot/Converge decisions, and final report synthesis.

745 Updated 1 months ago
rohitg00