code-reviewer

Review source code for security, performance, and best-practice issues.

190|27|Updated Apr 22, 2026
One-click install
npx skills add https://github.com/linxuan-sys/opencode-skills-chinese --skill code-reviewer-linxuan-sys
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/linxuan-sys/opencode-skills-chinese/tree/main/code-reviewer
Command: npx skills add https://github.com/linxuan-sys/opencode-skills-chinese --skill code-reviewer-linxuan-sys

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

它帮助你在合并代码之前系统性识别安全漏洞、性能隐患和最佳实践问题,从而降低缺陷进入生产环境的风险并提升代码质量。

Core Features & Use Cases

  • 安全审查:重点检查 SQL 注入、XSS、不安全的数据处理以及硬编码密钥或凭证等高风险点。
  • 性能评估:识别不必要的循环与冗余逻辑、潜在内存泄漏,以及缺失的缓存优化机会。
  • 最佳实践检查:覆盖命名清晰度、错误处理合理性、代码文档与 DRY 原则违背等可维护性问题。

Quick Start

将你要审查的代码片段或 PR 内容直接发给代码审查专家,让它按严重等级给出问题定位、修复建议和整体代码质量评分。

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an automated security audit on my source code?▼

An automated security audit identifies vulnerabilities like SQL injection, XSS, and hardcoded credentials in your source code. It targets high-risk areas to reduce flaws entering production and provides severity levels with concrete remediation steps.

Can I use this for pull request review workflows to catch performance issues?▼

Yes, pull request review workflows can catch performance issues by identifying unnecessary loops, redundant logic, and potential memory leaks before merging. It analyzes PR content to produce a structured report with severity levels and an overall quality score.

What is the best way to check code quality and best-practice violations?▼

The best way to check code quality and best-practice violations is reviewing source code for naming clarity, error handling, documentation, and DRY principle adherence. It generates a structured report with specific line references and an overall quality score from 1 to 10.

Does code review detect SQL injection and XSS vulnerabilities?▼

Yes, code review detects SQL injection and XSS vulnerabilities by specifically targeting unsafe data processing and hardcoded keys during the security audit phase. It flags these critical issues with specific code-segment references and concrete remediation steps.

How do I get a structured report for code quality checks?▼

To get a structured report for code quality checks, submit your code snippet for review. The process evaluates security, performance, and best practices, outputting a report with severity levels (Critical/High/Medium/Low), line references, and a 1 to 10 quality score.