Code Review

What it does

This skill enables AI agents to perform automated code reviews, analyzing source code for bugs, security vulnerabilities, and adherence to coding standards. It provides immediate feedback on pull requests or standalone files to improve software quality before deployment.

When to use it

• Before merging a pull request in a collaborative development environment.
• When integrating new libraries or dependencies into an existing backend service.
• To enforce consistent style guides and architectural patterns across a codebase.
• During the initial review of critical security patches or sensitive data handling logic.

Key capabilities

• Automated analysis of code for potential errors and vulnerabilities.
• Evaluation against defined coding standards and best practices.
• Identification of security flaws within backend logic.
• Generation of actionable feedback reports for developers.

Example prompts

• "Review this pull request and list any security vulnerabilities you find in the authentication module."
• "Analyze the provided Python script for compliance with our internal style guide and suggest refactoring improvements."
• "Perform a code review on this new API endpoint implementation to check for potential race conditions or memory leaks."

Tips & gotchas

Ensure the AI agent has access to the full context of the codebase, including related files and configuration, to provide accurate security assessments. This skill is most effective when used as part of a broader CI/CD pipeline rather than as a standalone final check.