Agent skill
code-reviewer
Review code for quality, security, and best practices. Use when asked to review code, find bugs, or suggest improvements.
Install this agent skill to your Project
npx add-skill https://github.com/beshkenadze/claude-skills-marketplace/tree/main/skills/development/code-reviewer
SKILL.md
Code Reviewer
Overview
Provides comprehensive code review capabilities including quality analysis, security scanning, and best practice recommendations.
Instructions
When reviewing code:
- Read the code thoroughly before making any suggestions
- Identify issues by category:
- Security vulnerabilities (OWASP Top 10)
- Performance concerns
- Code style and readability
- Logic errors and bugs
- Missing error handling
- Prioritize feedback from critical to minor
- Suggest fixes with concrete code examples
Review Categories
Security
- SQL injection, XSS, command injection
- Authentication/authorization flaws
- Sensitive data exposure
- Insecure dependencies
Performance
- N+1 queries
- Memory leaks
- Unnecessary computations
- Missing caching opportunities
Quality
- DRY violations
- SOLID principle violations
- Complex conditionals
- Missing tests
Examples
Example: Security Review
User Request: "Review this login function for security issues"
Response Format:
## Security Review: login()
### Critical Issues
1. **SQL Injection** (Line 15)
- Current: `query = f"SELECT * FROM users WHERE email='{email}'"`
- Fix: Use parameterized queries
### Recommendations
- Add rate limiting
- Implement account lockout
Guidelines
Do
- Be specific with line numbers when possible
- Provide working code examples for fixes
- Prioritize actionable feedback
- Acknowledge good patterns when found
- Read entire file before commenting
Don't
- Nitpick style issues (leave to linters)
- Block on subjective preferences
- Review generated/vendored code
- Make vague suggestions without examples
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
beshkenadze/claude-skills-marketplace
skill-with-scripts
A template for skills that include executable code for deterministic operations.
beshkenadze/claude-skills-marketplace
your-skill-name
Brief description of what this Skill does and when to use it. This field is critical for Claude to discover when to invoke your skill.
beshkenadze/claude-skills-marketplace
jis-accessibility
Use when auditing websites for Japanese accessibility compliance, checking JIS X 8341-3 conformance, or advising on Japan's Act for Eliminating Discrimination against Persons with Disabilities.
beshkenadze/claude-skills-marketplace
meeting-notes
Structure meeting transcripts into organized notes with action items, decisions, and key points. Use when processing meeting recordings or creating meeting summaries.
beshkenadze/claude-skills-marketplace
global-accessibility
Use when determining which accessibility law applies to an organization, comparing requirements across jurisdictions (US, EU, Canada, Japan), or planning multi-country accessibility compliance strategy.
beshkenadze/claude-skills-marketplace
aoda-compliance
Use when auditing websites or apps for Canadian accessibility law compliance, checking AODA (Ontario) or Accessible Canada Act (federal) requirements, or advising on CAN/ASC-EN 301 549 obligations.
Didn't find tool you were looking for?