code-review

Reviews branch diffs for security, language strictness, performance, and style violations.

Updated Jan 1, 2026
One-click install
npx skills add https://github.com/sarkarshivaditya-lab/WellMate --skill code-review-sarkarshivaditya-lab
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/sarkarshivaditya-lab/WellMate/tree/main/.engineering-skills/0xMassi-claude-skills/code-review
Command: npx skills add https://github.com/sarkarshivaditya-lab/WellMate --skill code-review-sarkarshivaditya-lab

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Reviewing pull requests and branch changes manually is slow and inconsistent, often missing security flaws, language-specific anti-patterns, and performance regressions. This Skill runs a structured, repeatable review of any branch diff so nothing slips through before merge. ## Core Features & Use Cases - Multi-language strictness checks: Auto-detects TypeScript, Rust, Swift, Go, and JavaScript files in the diff and applies the relevant rule sets (e.g., no any, no .unwrap(), no force unwrap). - Security and performance scanning: Flags hardcoded secrets, injection risks, missing auth checks, O(n^2) loops, sync I/O in async contexts, and unbounded caches. - Severity-ranked report: Outputs findings grouped as CRITICAL, HIGH, MEDIUM, and LOW with file, line, and rule ID, plus a passed-checks summary. - Use Case: Before merging a feature branch, run the review against main to catch a leaked API key, an empty catch block, and a nested-loop performance issue in one pass. ## Quick Start Ask the assistant to run /code-review on the current branch to get a severity-ranked review of all changes against main.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a branch before merging into main?▼

Run /code-review on your feature branch and it computes the merge-base against main, then scans the diff for security, strictness, performance, and style issues. Findings are grouped by severity with file and line references.

How to review a GitHub pull request automatically?▼

Use the PR review option, which fetches metadata with gh pr view and the diff with gh pr diff, then applies the same security, language, and performance checks. You can also scope the review to specific files or a commit range.

What languages does automated code review support?▼

The review auto-detects TypeScript, Rust, Swift, Go, and JavaScript from file extensions in the diff and applies language-specific rule sets. Only rules for languages actually present in the changes are enforced.

Can I review changes against a branch other than main?▼

Yes, pass a base branch override such as /code-review --base staging or --base develop. The review always uses the merge-base of that branch, so unrelated changes from other merged branches are excluded.

What security issues does a code review scan detect?▼

The scan flags hardcoded secrets like API keys and private keys, injection risks from string concatenation or eval, missing auth checks on endpoints, and committed credential files such as .env or .pem. It scans only the diff, not the full repository.