skills.rest
ruskicoder
ruskicoderCOMMUNITY
Explore all skills by this author →
GitHub

code-review

Reviews code changes for security, performance, correctness, and maintainability issues.

3|Updated Jun 29, 2026
Search Tags:#static analysis#code review#pull request#owasp#security audit#diff#performance analysis
One-click install
npx skills add https://github.com/ruskicoder/system-prompts --skill code-review-ruskicoder
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/ruskicoder/system-prompts/tree/main/prompt-orchestrator/.opencode/skills/code-review
Command: npx skills add https://github.com/ruskicoder/system-prompts --skill code-review-ruskicoder

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Manually reviewing pull requests and diffs for security vulnerabilities, performance bottlenecks, and logic errors is time-consuming and easy to get wrong under time pressure. This Skill applies a structured review checklist so critical issues like injection risks, N+1 queries, and missing error handling are not overlooked. ## Core Features & Use Cases - Security Audit: Checks for OWASP top 10 issues including SQL injection, XSS, CSRF, hardcoded secrets, path traversal, and SSRF. - Performance Analysis: Detects N+1 queries, memory leaks, algorithmic complexity problems, missing indexes, and resource leaks. - Correctness & Maintainability Review: Flags edge cases, race conditions, error handling gaps, naming issues, duplication, and missing test coverage. - Use Case: Paste a PR URL or diff before merging and receive a structured report with critical issues, suggestions, positive observations, and an approve/request-changes verdict. ## Quick Start Ask the AI to review a pull request URL, pasted diff, or file path for security, performance, and correctness issues before merging.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a pull request for security issues?▼

Provide the PR URL, pasted diff, or file path and request a review. The review checks for OWASP top 10 risks including SQL injection, XSS, CSRF, hardcoded credentials, insecure deserialization, path traversal, and SSRF.

How to detect N+1 queries and performance problems in code changes?▼

Submit the diff or files for a performance-focused review. It flags N+1 queries, unnecessary memory allocations, O(n²) complexity in hot paths, missing database indexes, unbounded loops, and resource leaks.

What input formats does the code review accept?▼

The review accepts a pull request URL, a pasted diff, or a direct file path. If no input is provided, it asks what to review, and you can narrow the scope by specifying concerns like security or performance.

Can the review pull a PR diff automatically from source control?▼

Yes, when a source control connector is available it pulls the PR diff automatically and checks CI status. Without connectors, it works standalone on any pasted diff, URL, or file path you provide.

What does the code review output look like?▼

The output is a Markdown report containing a summary, a table of critical issues with severity ratings, a suggestions table, positive observations, and a final verdict of Approve, Request Changes, or Needs Discussion.

Related Skills

Explore More Software Engineering Skills→
segersnielssegersniels

Review PR

Analyze pull request diffs to generate prioritized feedback on bugs, style, and security.

Community
Intermediate
p-o-ke-naep-o-ke-nae

github-flow

Guide GitHub Flow branching, commits, testing, pull requests, and squash merges.

Community
Intermediate
robertphyattrobertphyatt
7

testing-theatre-detection

Detect missing assertions, excessive mocking, and swallowed errors in JavaScript and Python test suites.

Community
Advanced
eliottbusinesseliottbusiness

requesting-code-review

Automate pre-commit code review with static analysis and security scanning.

Community
Advanced