Code Review

What it does

This skill enables AI agents to perform automated code reviews, analyzing submitted code for quality, adherence to best practices, and potential security vulnerabilities. It provides immediate feedback to developers by highlighting issues and suggesting improvements directly within the development workflow.

When to use it

• Before merging a pull request to ensure all changes meet project standards.
• During initial code implementation to catch logical errors or style inconsistencies early.
• When onboarding new team members to enforce consistent coding conventions across the codebase.
• For security audits to identify common vulnerabilities like SQL injection or hardcoded credentials.

Key capabilities

• Automated analysis of code quality and maintainability.
• Detection of security flaws and vulnerability patterns.
• Enforcement of specific coding style guides and best practices.
• Generation of actionable feedback and refactoring suggestions.

Example prompts

• "Review this Python function for performance bottlenecks and security issues."
• "Analyze the provided JavaScript code snippet against our team's ESLint rules and suggest fixes."
• "Perform a pre-merge review on this commit to check for logic errors and missing error handling."

Tips & gotchas

Ensure your AI agent has access to the full context of the project's existing style guide or configuration files (e.g., .eslintrc, pyproject.toml) for accurate reviews. While the skill identifies many issues, complex architectural decisions may still require human oversight.