code-reviewer

Reviews pasted code for security, performance, design, and readability issues with severity-ranked PR comments.

Updated Feb 26, 2026
One-click install
npx skills add https://github.com/VelkaressiaBlutkrone/spring-python-llm-exam-mng --skill code-reviewer-velkaressiablutkrone
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-reviewer
Source: https://github.com/VelkaressiaBlutkrone/spring-python-llm-exam-mng/tree/main/.claude/skills/code-reviewer
Command: npx skills add https://github.com/VelkaressiaBlutkrone/spring-python-llm-exam-mng --skill code-reviewer-velkaressiablutkrone

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Manually reviewing code across multiple dimensions—security vulnerabilities, performance bottlenecks, design principle violations, and readability issues—is time-consuming and inconsistent. This Skill automates comprehensive code review by applying structured checklists and producing severity-classified findings with concrete Before/After improvement code. ## Core Features & Use Cases - Multi-Dimensional Analysis: Reviews code across security (SQL Injection, XSS, hardcoded secrets), performance (N+1 queries, missing pagination, caching), design (SOLID violations, transaction boundaries), and readability (naming, magic numbers, dead code). - Severity Classification: Categorizes every finding as Critical, Major, Minor, or Nitpick with clear merge-readiness guidance. - Stack-Specific Checklists: Loads tailored review criteria for Java/Spring Boot, TypeScript/React, SQL/QueryDSL, Python/FastAPI, Node.js/NestJS, and Dart/Flutter. - Use Case: Paste a Spring Boot service class and receive a PR-style review identifying an N+1 query as Major, a hardcoded JWT secret as Critical, and unclear variable names as Minor—each with corrected code snippets. ## Quick Start Paste your code and ask for a code review with severity classification and improvement suggestions.

Frequently Asked Questions about code-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I get an automated code review with severity classification?▼

Paste your code and request a review. The Skill detects the tech stack, applies security, performance, design, and readability checklists, then classifies each finding as Critical, Major, Minor, or Nitpick with Before/After improvement code.

What security vulnerabilities can automated code review detect?▼

The review detects SQL Injection from string-concatenated queries, hardcoded secrets like JWT keys and passwords, sensitive data in logs, missing authentication checks, XSS via dangerouslySetInnerHTML, mass assignment, and path traversal vulnerabilities.

Which programming languages and frameworks are supported for code review?▼

Stack-specific checklists cover Java/Spring Boot, TypeScript/React, SQL/QueryDSL, Python/FastAPI, Node.js/NestJS, and Dart/Flutter. Common design and readability checklists apply to all languages.

How does the review detect N+1 query problems in JPA code?▼

It flags patterns like calling repository methods inside loops or accessing lazy-loaded collections after findAll(). Suggested fixes include JOIN FETCH queries, @EntityGraph, batch fetch sizing, and replacing per-item lookups with IN queries.

When should I use complexity analysis instead of a general code review?▼

Use this review for security, performance, design, and readability feedback on code you paste. For complexity metrics, SOLID violation measurement, or refactoring-focused analysis, the Skill directs you to the separate complexity-analyzer skill.