code-review-and-quality

Reviews code changes for correctness, security, performance, and test coverage gaps.

Updated Mar 26, 2026
One-click install
npx skills add https://github.com/sciman-top/skills-manager --skill code-review-and-quality-sciman-top
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review-and-quality
Source: https://github.com/sciman-top/skills-manager/tree/main/overrides/patches/code-review-and-quality
Command: npx skills add https://github.com/sciman-top/skills-manager --skill code-review-and-quality-sciman-top

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Code reviews often miss subtle defects or drown in style nitpicks. This Skill structures the review of a change set so that behavior-breaking defects, security weaknesses, and missing tests are surfaced with evidence before any summary. ## Core Features & Use Cases - Evidence-backed findings: Traces control flow and data flow in the changed files and reports each issue with severity, file/line location, impact, and a minimal fix direction. - Risk-prioritized scope: Focuses on defects that change behavior, lose data, weaken authorization, leak secrets, or break compatibility, while skipping style-only or hypothetical concerns. - Test gap analysis: Checks whether the highest-risk behaviors and failure modes are covered by tests without demanding duplicate test layers. - Use Case: After implementing a new API endpoint, ask for a review of the diff to catch an unhandled error path and a missing authorization check before merging. ## Quick Start Use $code-review-and-quality to review my latest changes and report findings by severity with file and line locations.

Frequently Asked Questions about code-review-and-quality

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I get an AI code review of my changes?▼

Invoke the skill on your change set and it traces control flow and data flow in the changed files. It reports findings by severity with file/line locations, concrete failure scenarios, and minimal fix directions before any summary.

What kinds of defects does a code quality review prioritize?▼

The review prioritizes defects that change behavior, lose data, weaken authorization, leak secrets, or break compatibility. It deliberately skips style preferences and hypothetical scale concerns to keep findings actionable.

Does the code review skill modify my code automatically?▼

No, the review does not authorize edits, commits, publication, or deployment. It only reports findings and fix directions unless you explicitly also ask for fixes to be applied.

How does the review handle missing test coverage?▼

It checks whether the highest-risk behaviors and failure modes in the changed path are covered by tests. It avoids requesting duplicate test layers when one sufficient layer already proves the risk.

When should security or performance analysis be added to a review?▼

Security hardening analysis applies only when the review contains a material security boundary. Performance analysis applies only when measurements or an identified hot path justify it, not speculatively.