Code Review Expert
Automates thorough backend code reviews, identifying bugs, security vulnerabilities, and suggesting performance improvements.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add helloggx-code-review-expert npx -- -y @trustedskills/helloggx-code-review-expert
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"helloggx-code-review-expert": {
"command": "npx",
"args": [
"-y",
"@trustedskills/helloggx-code-review-expert"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill empowers AI agents to perform comprehensive code reviews, analyzing source files for bugs, security vulnerabilities, and adherence to best practices. It provides actionable feedback to improve code quality and maintainability within backend development workflows.
When to use it
- Before merging pull requests to catch logical errors or security flaws early in the cycle.
- When refactoring legacy codebases to ensure new implementations follow modern standards.
- During initial code generation tasks to verify that output meets architectural constraints.
- To audit third-party dependencies or external contributions for potential risks.
Key capabilities
- Automated analysis of source code files for structural and logical issues.
- Identification of security vulnerabilities and common anti-patterns.
- Generation of specific, actionable recommendations for code improvement.
- Evaluation against established backend development best practices.
Example prompts
- "Review this Python backend module for potential race conditions and memory leaks."
- "Analyze the provided Node.js API handler for SQL injection vulnerabilities and suggest fixes."
- "Perform a code review on this Go service implementation to ensure it follows our team's concurrency guidelines."
Tips & gotchas
Ensure you provide the complete context of the codebase or specific files being reviewed, as isolated snippets may miss broader architectural issues. While effective at identifying standard patterns, complex business logic nuances might require human verification alongside the AI's analysis.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.