code-review

Review code for security, style, performance, and best-practice issues.

5|1|Updated Nov 21, 2025
One-click install
npx skills add https://github.com/ANcpLua/ancplua-claude-plugins --skill code-review-ancplua
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/ANcpLua/ancplua-claude-plugins/tree/main/plugins/code-review/skills/code-review
Command: npx skills add https://github.com/ANcpLua/ancplua-claude-plugins --skill code-review-ancplua

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates comprehensive code reviews, ensuring security, style, performance, and best practices are thoroughly checked.

Core Features & Use Cases

  • Security audit: Scan for injection flaws, auth/authorization gaps, sensitive data exposure.
  • Style & maintainability: Enforce naming, formatting, documentation, and DRY principles.
  • Performance & best practices: Detect N+1 queries, heavy computations, and error handling issues.
  • Report generation: Produce a structured findings summary for PR feedback.

Quick Start

Run the code-review workflow against your latest changes to generate a structured report.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities in my code before merging?▼

Automated code review scans for injection flaws, authentication gaps, and sensitive data exposure to catch security issues before deployment. Run it on pull requests or pre-commit to generate structured findings for remediation.

What coding standards and style issues can code review detect?▼

Code review enforces naming conventions, formatting, documentation, DRY principles, and single-responsibility patterns. It produces a findings summary highlighting style and maintainability violations across your codebase.

Can I use code review to find performance bottlenecks?▼

Yes. Code review detects N+1 queries, heavy computations, error handling gaps, and logging issues. It analyzes existing code or recent changes to identify performance and best-practice violations with actionable guidance.

How do I audit legacy code for security and quality issues?▼

Run code review against existing projects to perform comprehensive security audits and quality assessments. It identifies injection vulnerabilities, insecure dependencies, test coverage gaps, and compliance violations in a structured report.

What output does code review generate for pull request feedback?▼

Code review produces a structured findings report categorizing security, style, performance, and best-practice issues. Use this report to guide code changes and document review decisions during pre-merge gates.

Do I need static analysis tools or linters already in place to use code review?▼

No dependencies or prerequisites are required. Code review performs its own comprehensive scanning for security, style, performance, and best practices without requiring external static analysis setup.