Code Reviewer
Analyzes code diffs and files to surface bugs, security vulnerabilities, code smells, and architectural concerns in a structured, prioritized report.
Before & after
Same prompt, same agent — the only difference is the skill.
I can review the code for you and provide feedback on potential issues. I'll look for common problems like bugs, security vulnerabilities, performance issues, and code quality concerns. It might help to know what the code is supposed to do and what changes are being made. There could be SQL injection risks, improper error handling, or other security problems, but I'll need to see the actual code to identify specific issues. I might also suggest refactoring opportunities or naming improvements. Would you like me to look at the diff first, or would you prefer to share the full file context? I'd recommend checking the test coverage as well.
CODE REVIEW REPORT
FILE: db-query-service.ts (Lines 42-67)
PRIORITY 1: SQL INJECTION RISK
Location: Line 54, buildQuery() concatenates user input
Issue: "SELECT * FROM users WHERE id = " + userId (unsanitized)
OWASP: A03:2021 — Injection
Fix: Use parameterized queries: db.query("SELECT * FROM users WHERE id = ?", userIdParam)
Severity: Critical
PRIORITY 2: N+1 QUERY PATTERN
Location: Lines 59-63, loop fetches user for each row
Issue: for (const row of results) loop fetches separate query per row
Performance: 100 users = 101 queries (1 initial + 100 in loop)
Fix: batch eager-load users in single query before loop
Estimated impact: 50-100ms saved per request
PRIORITY 3: MISSING ERROR BOUNDARY
Location: catch block (line 65) swallows errors silently
Issue: console.log(error) with no alerting, no retry logic
Fix: Throw structured error with context; log to monitoring
PRIORITY 4: NAME SMELL
Location: Variable "x" (line 45)
Fix: Rename to "userPermissions"
TEST COVERAGE: 60% for this file (aim for 80%+)About this skill
name: code-reviewer description: Use when Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then pr...
Code Reviewer
Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback. Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues. Invoke for PR reviews, code quality checks, refactoring suggestions, review code, code quality. Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass.
What you get
- Public GitHub repo
- the skills/code-reviewer folder with SKILL.md and references.
Customize your output
- Fork the repo and extend the skill's reference files for your own stack conventions.
Example output
Activates on a matching request (e.g. building or reviewing Code Reviewer code) and can chain with other skills in the pack.
Best for
Full-stack developers and engineering teams using Claude Code.
SKILL.md preview
---
name: code-reviewer
description: Use when reviewing pull requests, auditing code quality, or checking for security vulnerabilities, N+1 queries, and architectural concerns across a broad-scope pass.
version: 1.0.0
category: Development / Engineering
author: AgentVolt
license: proprietary
tags:
- development
- engineering
---
# Code Reviewer
Analyzes code diffs and files to surface bugs, security vulnerabilities, code smells, and architectural concerns in a structured, prioritized report.
## When to use
… (sign up to view the full skill)More development skills
View all Development skills →Generate
Scaffold code, tests, and boilerplate from a short spec.
Performance Profiler
Systematic performance profiling for Node.js, Python, and Go applications.
Threat Detection
Use when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry.
Agent Harness
Turns a domain folder of skills into a bounded agentic loop: compile a goal into a task plan, execute with the domain's tools, verify every task, retry within a budget.