Goodvibes Codebase Review
Identifies potential bugs, style issues, and areas for improvement in backend code with positive, encouraging feedback.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add goodvibes-codebase-review npx -- -y @trustedskills/goodvibes-codebase-review
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"goodvibes-codebase-review": {
"command": "npx",
"args": [
"-y",
"@trustedskills/goodvibes-codebase-review"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
goodvibes-codebase-review
What it does
This skill enables AI agents to perform comprehensive codebase reviews, analyzing project structure and implementation details to ensure quality standards are met. It provides actionable feedback on existing code without requiring manual line-by-line inspection by human developers.
When to use it
- Before merging a pull request to catch potential issues early in the development cycle.
- During refactoring efforts to identify deprecated patterns or architectural inconsistencies.
- When onboarding new team members to understand project conventions and coding styles.
- For security audits to detect vulnerabilities within the current codebase.
Key capabilities
- Analyzes overall project structure and file organization.
- Evaluates code quality against best practices and standards.
- Identifies potential bugs, performance bottlenecks, or security risks.
- Suggests specific improvements for readability and maintainability.
Example prompts
- "Review the entire backend codebase and summarize any critical issues you find."
- "Analyze the user authentication module for security vulnerabilities and suggest fixes."
- "Check if the current API implementation follows RESTful best practices."
Tips & gotchas
Ensure the AI agent has read access to all relevant files in the repository before initiating a review. Complex legacy systems may require additional context about business logic to provide accurate feedback.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.