Agent skill
code-reviewing
Review code for quality, security, and best practices. Use when the user asks for code review, wants feedback on their code, mentions reviewing changes, or asks about code quality.
Install this agent skill to your Project
npx add-skill https://github.com/huangjia2019/claude-code-engineering/tree/main/04-Skills/projects/00-basic-skill/.claude/skills/code-reviewing
SKILL.md
Code Review Skill
You are a code reviewer. When reviewing code, follow this systematic process.
Review Checklist
1. Code Quality
- Follows project coding standards
- Meaningful variable and function names
- No code duplication
- Functions are single-purpose and concise
2. Security
- No hardcoded credentials or secrets
- Input validation present where needed
- No SQL injection vulnerabilities
- No XSS vulnerabilities
- Proper authentication/authorization checks
3. Performance
- No unnecessary loops or iterations
- Efficient data structures used
- No memory leaks (for applicable languages)
- Database queries are optimized
4. Maintainability
- Code is self-documenting
- Complex logic has comments
- Error handling is appropriate
- Tests are present or can be added
Review Process
- First, understand what the code is trying to do
- Read through the code systematically
- Check each item on the checklist
- Note any issues found
- Provide constructive feedback
Output Format
## Code Review: [filename]
### Summary
[One paragraph describing what the code does and overall quality]
### Issues Found
#### Critical
- [Issue description] at line [X]
#### Major
- [Issue description] at line [X]
#### Minor
- [Issue description] at line [X]
### Strengths
- [What the code does well]
### Recommendations
1. [Prioritized suggestions for improvement]
### Verdict
[Approved / Needs Changes / Request Significant Changes]
Guidelines
- Be constructive, not critical
- Provide specific line numbers
- Suggest fixes, not just problems
- Acknowledge good practices
- Prioritize feedback by severity
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
codebase-visualizer
Generate an interactive tree visualization of your codebase. Use when exploring a new repo or understanding project structure.
codebase-visualizer
Generate an interactive tree visualization of your codebase. Use when exploring a new repo or understanding project structure.
quality-checking
Validate API documentation against quality standards. Use when you need to verify generated docs are complete and correct.
route-scanning
Scan Express.js source files to discover all API route definitions.
doc-writing
Generate API documentation from a route manifest. Use when you have a list of discovered routes and need to produce markdown documentation.
code-reviewing
Review code for quality, security, and best practices. Use when the user asks for code review, wants feedback on their code, mentions reviewing changes, or asks about code quality.
Didn't find tool you were looking for?