code-review
Review code for quality, security vulnerabilities, and best practices compliance
When & Why to Use This Skill
This Claude skill automates the code review process by analyzing source code for quality, security vulnerabilities, and adherence to best practices. It provides structured feedback on bugs, performance bottlenecks, and compliance with industry standards like OWASP, helping development teams maintain high-quality, secure, and performant codebases efficiently.
Use Cases
- Automated Pull Request Reviews: Streamline the development workflow by automatically scanning new code submissions for logic errors, edge cases, and style violations before human review.
- Security Vulnerability Scanning: Proactively identify critical security risks such as input validation issues, injection prevention, and OWASP Top 10 vulnerabilities to harden application security.
- Performance Optimization: Detect inefficient algorithms, unnecessary loops, and potential memory leaks in legacy or new code to improve system responsiveness and resource management.
- Coding Standards Enforcement: Ensure architectural consistency across large teams by verifying that all code follows established naming conventions, documentation requirements, and structural guidelines.
| name | code-review |
|---|---|
| description | Review code for quality, security vulnerabilities, and best practices compliance |
Code Review
Review code for quality, security issues, and best practices.
Capabilities
- Identify bugs and potential issues
- Check for security vulnerabilities (OWASP top 10)
- Suggest performance improvements
- Verify coding standards compliance
Checklist
- Error handling - proper try/catch, edge cases
- Security - input validation, injection prevention
- Performance - unnecessary loops, memory leaks
- Readability - naming, comments, structure
Output Format
Returns structured feedback with:
- severity: critical | warning | info
- location: file:line
- message: description of the issue
- suggestion: how to fix