Agent skill
code-review
Reviews code diffs and files for security vulnerabilities (OWASP Top 10), error handling, complexity, naming conventions, and performance issues. Use when the user asks to review a PR, pull request, diff, merge request, or code changes.
Install this agent skill to your Project
npx add-skill https://github.com/open-gitagent/gitagent/tree/main/examples/standard/skills/code-review
Metadata
Additional technical details for this skill
- author
- gitagent-examples
- version
- 1.0.0
- category
- developer-tools
SKILL.md
Code Review
Instructions
When reviewing code:
- Read the full diff or file provided
- Check for security vulnerabilities (OWASP Top 10)
- Evaluate error handling completeness
- Assess code complexity and readability
- Verify naming conventions and code style
- Look for performance issues
- Check for proper input validation
Output Format
## Review Summary
[1-2 sentence overview]
## Findings
### CRITICAL
- [Finding with line reference and fix]
### WARNING
- [Finding with line reference and fix]
### SUGGESTION
- [Finding with line reference and fix]
## What's Done Well
- [Positive observations]
Example Finding
### CRITICAL
- **Line 42**: SQL injection vulnerability — user input concatenated directly into query string.
Fix: Use parameterized queries instead of string concatenation.
```python
# Before (vulnerable)
cursor.execute(f"SELECT * FROM users WHERE id = {user_id}")
# After (safe)
cursor.execute("SELECT * FROM users WHERE id = %s", (user_id,))
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
paper-search
Academic paper search via Google Scholar using Serper API
web-search
Advanced web search using Tavily API for current information retrieval
knowledge-retrieval
Semantic search over ingested documents using RAG (LlamaIndex/ChromaDB or Foundational RAG)
wiki-ingest
Ingest a raw source document into the wiki. Reads the source, extracts key information, creates or updates wiki pages, maintains cross-references, and logs the operation. Use when the user adds a new source or says 'ingest this'.
wiki-lint
Health-check the wiki for contradictions, stale claims, orphan pages, missing cross-references, and knowledge gaps. Use periodically or when the user says 'lint the wiki' or 'check wiki health'.
wiki-query
Query the wiki to answer questions. Searches wiki pages, synthesizes answers with citations, and optionally files valuable answers back as new wiki pages. Use when the user asks a question about the knowledge base.
Didn't find tool you were looking for?