code-reviewer
Review code for quality, security, and best practices. Use when asked to review code, find bugs, or suggest improvements.
When & Why to Use This Skill
This Claude skill provides comprehensive automated code review capabilities designed to enhance software quality, security, and maintainability. By analyzing code for OWASP vulnerabilities, performance bottlenecks, and adherence to SOLID principles, it empowers developers to deliver cleaner, more efficient, and secure code through actionable feedback and concrete fix suggestions.
Use Cases
- Security Vulnerability Scanning: Automatically detect critical risks such as SQL injection, XSS, and insecure authentication flaws during the development phase.
- Performance Bottleneck Identification: Identify inefficient logic, N+1 query issues, and memory leaks to optimize application speed and resource usage.
- Code Quality & Best Practices: Ensure codebase consistency by enforcing DRY principles, improving readability, and suggesting architectural improvements.
- Bug and Logic Error Detection: Uncover hidden logic flaws, edge cases, and missing error handling in complex functions before they reach production.
| name | code-reviewer |
|---|---|
| description | Review code for quality, security, and best practices. Use when asked to review code, find bugs, or suggest improvements. |
| version | 1.0.0 |
Code Reviewer
Overview
Provides comprehensive code review capabilities including quality analysis, security scanning, and best practice recommendations.
Instructions
When reviewing code:
- Read the code thoroughly before making any suggestions
- Identify issues by category:
- Security vulnerabilities (OWASP Top 10)
- Performance concerns
- Code style and readability
- Logic errors and bugs
- Missing error handling
- Prioritize feedback from critical to minor
- Suggest fixes with concrete code examples
Review Categories
Security
- SQL injection, XSS, command injection
- Authentication/authorization flaws
- Sensitive data exposure
- Insecure dependencies
Performance
- N+1 queries
- Memory leaks
- Unnecessary computations
- Missing caching opportunities
Quality
- DRY violations
- SOLID principle violations
- Complex conditionals
- Missing tests
Examples
Example: Security Review
User Request: "Review this login function for security issues"
Response Format:
## Security Review: login()
### Critical Issues
1. **SQL Injection** (Line 15)
- Current: `query = f"SELECT * FROM users WHERE email='{email}'"`
- Fix: Use parameterized queries
### Recommendations
- Add rate limiting
- Implement account lockout
Guidelines
- Be specific with line numbers when possible
- Provide working code examples for fixes
- Prioritize actionable feedback
- Acknowledge good patterns when found