code-review

Analyze code diffs, pull requests, files, and snippets for security, performance, correctness, and maintainability issues.

1|Updated May 7, 2022
One-click install
npx skills add https://github.com/brandonburrus/dotfiles --skill code-review-brandonburrus
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/brandonburrus/dotfiles/tree/main/.agents/skills/code-review
Command: npx skills add https://github.com/brandonburrus/dotfiles --skill code-review-brandonburrus

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the need for thorough code analysis to identify and rectify bugs, security vulnerabilities, performance bottlenecks, and maintainability issues before they impact production.

Core Features & Use Cases

  • Comprehensive Analysis: Evaluates code across security, performance, correctness, and maintainability dimensions.
  • Multi-format Input: Works with diffs, pull requests, individual files, or pasted code snippets.
  • Use Case: A developer submits a pull request. This Skill analyzes the changes, flagging a potential SQL injection vulnerability and suggesting a more efficient database query, alongside positive feedback on code clarity.

Quick Start

Review the code changes in the current pull request for security and performance issues.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my code for security vulnerabilities and performance issues?▼

Analyzing code for security vulnerabilities and performance inefficiencies involves evaluating diffs or individual files for SQL injection risks, inefficient queries, and error handling gaps to ensure adherence to best practices.

Can I review a pull request diff for maintainability concerns and bug detection?▼

Yes, you can review a pull request diff for maintainability concerns and bug detection by submitting the code changes to evaluate correctness errors, code clarity, and adherence to optimization best practices across various programming languages.

What types of code input formats are supported for vulnerability analysis?▼

Vulnerability analysis supports multiple input formats including code diffs, pull requests, individual files, and pasted code snippets across various programming languages to identify security flaws and correctness errors.

Does automated code review work with different programming languages?▼

Automated code review works across various programming languages, evaluating submitted files or snippets for security vulnerabilities, performance bottlenecks, and maintainability concerns to rectify issues before production impact.

What is the best way to find performance bottlenecks and correctness errors before production?▼

The best way to find performance bottlenecks and correctness errors before production is to run a comprehensive code analysis on your pull requests, evaluating query efficiency, error handling, and security vulnerabilities.