Back to Skills

code-review

Review generated code for bugs, security issues, performance, and best practices. Use when reviewing Claude-generated code, checking for vulnerabilities, auditing implementation quality, or validating code changes before commit.

2starsUpdated 3/19/2026

Security Assessment

Safe(100/100)
Security Score100/100

About code-review

The Code Review skill is designed to systematically analyze generated code for quality, security, performance, and adherence to project standards. It provides a structured approach to reviewing code produced by AI agents like Claude, helping teams identify potential bugs, vulnerabilities, and maintainability issues before they reach production. By automating parts of the review process while highlighting areas requiring human attention, it reduces the risk of introducing critical errors and ensures consistency across codebases.

This skill offers capabilities for comprehensive code analysis, including evaluating code structure, readability, naming conventions, and adherence to best practices such as DRY and SOLID principles. It focuses on security by checking input validation, authentication, authorization, error handling, and compliance with OWASP Top 10 guidelines. Performance considerations are addressed through algorithm efficiency, database query optimization, memory usage analysis, and identification of caching or async/await improvements. Maintainability features include ensuring test coverage, proper type hinting, clear docstrings, and exception handling. Standards compliance is enforced with attention to project-specific coding guidelines, framework conventions, and regulatory considerations like HIPAA.

The skill is primarily targeted at developers, QA engineers, and security auditors who need to validate AI-generated code or review significant changes before committing. Common use cases include auditing code for vulnerabilities, checking compliance with internal coding standards, evaluating performance implications, and providing pre-commit validation. It is especially useful in collaborative or regulated environments where maintaining high-quality, secure, and maintainable code is critical.

FAQ

How do I use the Code Review skill?

You can use the skill to review generated code by following its structured process, which includes context gathering, architecture assessment, static analysis, pattern matching, and a security deep dive. It works best with AI-generated code but can also audit human-written code for quality and security.

Which programming languages or frameworks are supported?

The skill is primarily tailored for Python projects, with specific considerations for frameworks like FastAPI. It checks for patterns, type hints, Pydantic schemas, and best practices relevant to Python development.

Does it require access to a Git repository?

Yes, the skill requires Git context to gather file changes and analyze diffs before performing a review. Database context is optional and not required for basic code reviews.

Can it detect critical security issues automatically?

The skill identifies potential security concerns and flags critical patterns such as authentication, authorization, and crypto usage. However, human review is recommended for high-risk or sensitive code before merging.

Are there limitations on the file size or number of files?

The skill supports up to 50 files per context and uses a compression level of 1. It works best in batch reviews, with a preferred batch size of five files at a time.

Install code-review

Download and extract the skill files to your .claude/skills/ directory.

Quick Setup:

  1. Copy the skill folder to .claude/skills/
  2. Claude will automatically detect and use the skill