code-reviewer

Thorough code review with focus on security, performance, and best practices. Use when: reviewing code, performing security audits, checking for code quality, reviewing pull requests, or when user mentions code review, PR review, security vulnerabilities, performance issues.

110,878stars16,437forksUpdated 5/18/2026

Data Science & ML Security Code Review Documentation Testing & QA #security #correctness #performance #maintainability #documentation #testing #code-review #python #javascript

Security Assessment

Low Risk(75/100)

Detected risks:

Remote Code Execution([rules/security-xss-prevention.md] eval()

Security Score75/100

About code-reviewer

The `code-reviewer` skill is designed to provide comprehensive code review services, focusing on identifying security vulnerabilities, performance bottlenecks, and overall code quality issues. By systematically analyzing code, this skill helps prevent critical errors, potential exploits, and inefficient implementations before deployment. It serves as an expert assistant for developers and teams who need reliable, structured guidance to maintain secure, efficient, and maintainable codebases.

This skill includes a detailed set of rules organized by categories such as Security, Performance, Correctness, and Maintainability. Each rule is prioritized, allowing users to follow a structured review process: addressing critical security risks first, followed by performance optimizations, correctness checks, and maintainability improvements. It also provides recommendations for testing, including unit tests, edge case handling, and integration tests. Users can refer to specific rules in the `rules/` directory or the comprehensive `AGENTS.md` for examples and detailed guidance. The skill emphasizes best practices like preventing SQL injection and XSS attacks, avoiding N+1 query problems, proper error handling, meaningful naming, and adding type hints.

Typical use cases include reviewing pull requests, performing pre-deployment audits, ensuring code quality, and evaluating security and performance risks. Target users are developers, software engineers, DevOps teams, and security auditors who require structured, actionable insights into code quality and security. By integrating this skill into their workflow, teams can streamline code reviews, reduce errors, and maintain high standards in software development.

FAQ

How do I use the code-reviewer skill effectively?

Start by reviewing the `AGENTS.md` file for examples and a comprehensive list of rules. Follow the priority order: Security, Performance, Correctness, and Maintainability. Reference specific rules in the `rules/` directory for deeper guidance.

Which programming languages does this skill support?

The documentation does not specify particular languages, but the skill is generally applicable to codebases where security, performance, correctness, and maintainability rules can be applied, such as Python, JavaScript, or similar languages.

Can this skill detect all types of security vulnerabilities?

The skill focuses on common critical vulnerabilities like SQL injection, XSS, authentication/authorization bypasses, hardcoded secrets, and insecure dependencies. It may not detect all possible security issues in every context.

Is this skill suitable for automated integration into CI/CD pipelines?

While the skill provides structured guidance and rules for reviews, the documentation does not mention automation capabilities. It is primarily designed for manual review processes by developers or auditors.

What prerequisites are needed to use this skill?

Users should have access to the codebase under review and a basic understanding of security, performance, and coding best practices. Familiarity with the rule documentation and the review process is recommended.