kta-code-review

Reviews Kotlin code for security, concurrency, architecture, and correctness issues with prioritized findings.

Updated May 31, 2026
One-click install
npx skills add https://github.com/decoutkhanqindev/Lich-Viet-Loc-Phat --skill kta-code-review-decoutkhanqindev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: kta-code-review
Source: https://github.com/decoutkhanqindev/Lich-Viet-Loc-Phat/tree/main/.claude/skills/kta-code-review
Command: npx skills add https://github.com/decoutkhanqindev/Lich-Viet-Loc-Phat --skill kta-code-review-decoutkhanqindev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve? Reviewing Kotlin code thoroughly requires deep expertise across concurrency, null safety, architecture, and security, and manual reviews often miss subtle defects like swallowed CancellationExceptions or broken structured concurrency. ## Core Features & Use Cases - Multi-category review: Judges Kotlin code across seven ordered categories — security, architecture, logic and correctness, concurrency, testability, language idioms, and performance — with severity-ranked findings. - Flexible input modes: Reviews pending git changes, branches, pull requests, commits, single files, modules, pasted code, or full codebase scans. - Static pre-pass: Runs a grep-based helper script to detect force-unwraps, GlobalScope usage, weak crypto, hardcoded secrets, and insecure HTTP before deep analysis. - Use Case: A developer finishes a feature branch and asks for a review; the skill diffs against the base branch, flags a Critical GlobalScope.launch leak and a Major force-unwrap on parsed JSON, then outputs a scored report with file:line anchors and minimal fixes. ## Quick Start Ask the assistant to review the Kotlin changes on your current branch and produce a prioritized report with severity ratings and fixes.

Frequently Asked Questions about kta-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review Kotlin code changes before merging a pull request?▼

Provide the PR number, branch name, or run a review of pending git changes. The reviewer diffs the code, runs a static pre-pass for common defects, and returns prioritized findings with file:line anchors, severity ratings, and minimal fixes.

What Kotlin concurrency bugs can a code review detect?▼

The review detects GlobalScope usage, swallowed CancellationException, runBlocking in production code, unsynchronized shared mutable state, dropped async Deferreds, and missing cancellation cooperation in CPU loops. Each finding cites the violated structured-concurrency rule and a fix.

Does this Kotlin review depend on a specific framework like Spring or Android?▼

No, the review is framework-agnostic and makes no assumptions about DI frameworks, UI toolkits, networking stacks, or build systems. It judges Kotlin language idioms, architecture principles, and stdlib mechanisms rather than recommending specific libraries.

Can the review output machine-readable results for CI pipelines?▼

Yes, requesting JSON output produces a structured report containing the target, composite score, recommendation, severity counts, and a findings array with category, file, line, rule, issue, fix, and snippet fields suitable for automation.

What happens when reviewed Kotlin code contains hardcoded secrets?▼

Hardcoded credentials, tokens, or keys are flagged as Critical findings. The reviewer redacts the literal value in the report, recommends loading secrets from environment or a secret store, and notes that rotation is required even after deletion.

When should I not use this Kotlin code review skill?▼

It is not intended for pure test generation, refactoring without review, or single-function micro-optimization tasks. It also does not execute code, modify files, or post comments to remote systems — it only reads source and produces findings.