quality-review

Evaluate code quality, security, maintainability, and performance beyond specifications.

25|7|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/xoai/sage --skill quality-review-xoai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: quality-review
Source: https://github.com/xoai/sage/tree/main/core/capabilities/review/quality-review
Command: npx skills add https://github.com/xoai/sage --skill quality-review-xoai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the need to ensure code is not just functional, but also well-crafted, secure, maintainable, and performant, going beyond basic spec compliance.

Core Features & Use Cases

  • Comprehensive Code Evaluation: Assesses readability, error handling, security vulnerabilities, performance bottlenecks, and adherence to conventions.
  • Quality Gates: Acts as a critical quality gate (Gate 3) in the development pipeline, ensuring code is built to high standards.
  • Use Case: After a feature is implemented and passes initial reviews, use this Skill to perform a deep dive into the code's quality, identifying potential security risks or performance issues before deployment.

Quick Start

Use the quality-review skill to evaluate the recently implemented code for quality and security.

Frequently Asked Questions about quality-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit and code review beyond basic spec compliance?▼

To perform a security audit and code review beyond spec compliance, evaluate readability, error handling, vulnerabilities, and performance bottlenecks. This requires implementation details, codebase context, and a constitution to ensure adherence to best practices.

What does a comprehensive code quality evaluation cover for maintainability?▼

A comprehensive code quality evaluation for maintainability covers readability, error handling, security vulnerabilities, performance bottlenecks, and convention adherence, ensuring code is well-crafted and secure before deployment.

When do I need to run a deep performance analysis on my codebase?▼

You need to run a deep performance analysis after a feature is implemented and passes initial reviews. This acts as a critical quality gate to identify performance bottlenecks and security risks before deployment.

What do I need to provide to assess code readability and security vulnerabilities?▼

To assess code readability and security vulnerabilities, you need to provide implementation details, codebase context, and a constitution. This ensures adherence to project standards and best practices during evaluation.

Can I use this to check convention adherence and clean code standards?▼

Yes, you can use it to check convention adherence and clean code standards. It evaluates code quality, security, maintainability, and performance by analyzing readability, error handling, and convention compliance against a project constitution.

Why does code review require a constitution and codebase context?▼

Code review requires a constitution and codebase context to ensure adherence to best practices and project standards. This allows the evaluation to accurately assess maintainability, security vulnerabilities, and performance bottlenecks.