code-review

Identify security, architecture, and quality issues in code changes against origin/main.

2|Updated Dec 9, 2025
One-click install
npx skills add https://github.com/signalbeam-io/signalbeam-edge --skill code-review-signalbeam-io
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/signalbeam-io/signalbeam-edge/tree/main/.claude/skills/code-review
Command: npx skills add https://github.com/signalbeam-io/signalbeam-edge --skill code-review-signalbeam-io

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Code changes often introduce security risks, architectural drift, and quality issues that are hard to spot in isolation. This Skill provides a structured, repeatable review process that surfaces critical findings before merging.

Core Features & Use Cases

  • Security-focused checks: Detect injection risks, weak authentication patterns, and data handling concerns across diffs.
  • Architecture & maintainability: Identify architectural violations, single-responsibility breaches, and code smells that hinder future changes.
  • PR-ready reporting: Generate actionable findings with severity levels and recommended fixes suitable for pull requests.

Quick Start

Provide the current branch diff to generate a comprehensive code-review report.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect security vulnerabilities in a pull request diff?▼

Code review for pull requests works by comparing your current feature branch against origin/main to identify architectural violations and code smells. It outputs a structured report with prioritized findings, risk classifications, and recommended fixes to inform the merge process.

Can I identify architectural drift and code smells in feature branches?▼

You can identify architectural drift and code smells in feature branches by analyzing the diff against origin/main. The review process detects single-responsibility breaches and maintainability issues that hinder future changes, providing actionable findings suitable for pull requests.

What is the best way to automate OWASP checks on a code diff?▼

The best way to automate OWASP checks on a code diff is to process the branch comparison against origin/main. This surfaces injection risks, weak authentication patterns, and data handling concerns across the changes, generating a PR-ready report with severity levels.

Does static analysis for code review work without integrating external dependencies?▼

Static analysis for code review works without external dependencies by evaluating the provided diff directly. It compares the current branch to origin/main to output risk classifications and recommended fixes, operating independently to inform PR reviews.

How do I generate a PR-ready report with risk classifications for code changes?▼

To generate a PR-ready report with risk classifications for code changes, compare your current branch against origin/main. The resulting structured report includes prioritized findings, severity levels, and recommended fixes for security, architecture, and quality issues.