Code Review
Automates backend code reviews, identifying potential bugs, security vulnerabilities, and style inconsistencies for improved quality.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add mgd34msu-code-review npx -- -y @trustedskills/mgd34msu-code-review
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"mgd34msu-code-review": {
"command": "npx",
"args": [
"-y",
"@trustedskills/mgd34msu-code-review"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill automates backend code reviews using GoodVibes precision tools to identify potential bugs, security vulnerabilities, style inconsistencies, and adherence to architectural patterns. It aims to ensure consistency, validate security and performance, and maintain high quality standards across the codebase by performing thorough, enterprise-grade reviews. The process involves understanding changes, analyzing code, and identifying related code sections.
When to use it
This skill is useful in the following situations:
- Reviewing pull requests or merge requests
- Performing code quality audits
- Validating security and performance of implementations
- Checking adherence to architectural patterns
- Assessing test coverage and quality
- Evaluating accessibility compliance
- Providing structured feedback to developers
Key capabilities
- Identifies changed files using glob patterns.
- Analyzes code content using
precision_read. - Extracts diff context using git commands.
- Finds related code through grep searches for function exports, usage sites, and tests.
- Provides insights into the scope of changes (frontend, backend, full-stack).
Example prompts
Here are some example prompts you can use with an AI agent equipped with this skill:
- "Review this code."
- "Check the PR for security vulnerabilities."
- "Perform a quality audit on these changes."
- "Validate implementation of createUser function."
Tips & gotchas
- The skill relies on
discoverandprecision_readcommands to gather information. Ensure these are properly configured within your agent's workflow. - The accuracy of the review depends on the quality of the code and the defined patterns in
review-patterns.md.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.