Analyze PR diffs and generate review comments from code quality, security, and performance perspectives. Use for code reviews, quality checks, and security analysis.
The 'code-review' skill is designed to help developers and teams automate the process of analyzing pull request (PR) diffs. By reviewing code changes, it ensures that new contributions adhere to best practices in various domains, including code quality, security, and performance. This skill is useful for teams looking to streamline their code review process, increase code quality, and ensure that security vulnerabilities and performance bottlenecks are addressed early in the development cycle. By automating the analysis, teams can save time, reduce human error, and maintain high standards for their codebase.
This skill primarily focuses on four key areas: code quality, security, performance, and testing. It assesses code quality by checking readability, maintainability, and adherence to the DRY (Don't Repeat Yourself) principle. Security issues such as code injection, improper authentication, and mishandling of sensitive data are also flagged. Performance-related issues, such as N+1 queries and potential memory leaks, are identified to ensure that the code will scale effectively. The testing perspective ensures that the code is properly tested, covering edge cases and providing adequate test coverage. After analyzing the PR diff, the skill generates a list of review comments, detailing the filename, line number, issue description, and severity, providing developers with specific, actionable feedback.
The skill is ideal for software development teams, particularly those working in continuous integration environments, where automated code reviews can help maintain high standards without additional overhead. It is also valuable for security analysts who need to ensure that contributions do not introduce vulnerabilities and for performance engineers who want to identify potential issues before deployment. Whether you are performing routine quality checks or reviewing contributions for a specific project, this skill can be a vital part of the review process, helping to catch issues early and improve the overall quality of the codebase.
This skill requires a pull request (PR) diff in git diff format and the target file paths for review.
The skill is language-agnostic as long as the PR diff is provided in git diff format, making it compatible with any programming language.
Yes, the skill analyzes PR diffs, which are typically generated through version control systems like Git, and can be easily integrated into a Git-based workflow.
The skill only provides comments on code quality, security, performance, and testing based on the diff. It does not perform actual code execution or testing, so coverage and edge case identification rely on predefined rules.
The skill classifies issues by severity, providing specific comments on the filename, line number, and a description of the problem to guide developers in their code review process.
Quick Setup:
.claude/skills/Repository
breaking-brake/cc-wf-studio