Code Review
Automated code review focusing on Python/Django backend logic, identifying potential bugs, security vulnerabilities, and style inconsistencies.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add secondsky-code-review npx -- -y @trustedskills/secondsky-code-review
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"secondsky-code-review": {
"command": "npx",
"args": [
"-y",
"@trustedskills/secondsky-code-review"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
The code-review skill enables AI agents to analyze source code submissions, identifying logical errors, security vulnerabilities, and style inconsistencies. It provides actionable feedback to improve code quality before deployment.
When to use it
- Before merging a pull request in a collaborative development environment.
- When auditing third-party libraries for potential security flaws.
- During the initial review of a new developer's first commit to ensure team standards are met.
- To validate that refactored code maintains original functionality without introducing regressions.
Key capabilities
- Analyzes code for logical errors and edge cases.
- Detects common security vulnerabilities such as injection flaws or unsafe data handling.
- Enforces coding style guidelines and best practices.
- Suggests specific improvements to readability and maintainability.
Example prompts
- "Review this Python function for potential race conditions and suggest fixes."
- "Analyze the provided JavaScript module for security vulnerabilities and output a risk assessment."
- "Check this Rust implementation against our team's style guide and list any deviations."
Tips & gotchas
Ensure the code being reviewed is complete and includes necessary context, such as comments or related files, to allow for accurate analysis. While the skill identifies many issues, it should not replace human judgment for complex architectural decisions.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.