Skip to content
Get packs

Code Review Specialist

Gives thorough code reviews covering security, performance, quality and maintainability

Source Download skill
Repository
luongnv89/claude-howto
Stars
46,401
Licence
MIT
Files
3 files

What it does

When installed, the agent reviews code the way a senior engineer would, looking for security holes (auth, injection, data leaks, weak crypto, sensitive logging), performance issues (algorithm cost, memory, database queries, caching, concurrency), code quality (SOLID, patterns, naming, tests) and maintainability (readability, long functions, complexity, dependencies, type safety). Results follow a fixed format: a summary score from 1 to 5, critical issues with location, impact, severity and a suggested fix, then findings grouped by category.

Great for

  • Developers who want a second set of eyes on a pull request before merging
  • Teams that want consistent review structure across contributors
  • Engineers reviewing unfamiliar code who want a prioritized list of risks

Skip it if

  • Replacing a human security audit for production systems, since the review is only as reliable as the model's reading of the code and can miss issues or report false positives
  • Reviewing code that contains secrets or confidential data where the code is sent to an AI service you have not approved for that data

Try asking

  • “Review this pull request for security and performance problems”
  • “Do a code quality and maintainability review of the auth module”
  • “Check this database access code for query optimization opportunities”
  • “Evaluate this function for SOLID violations and suggest refactors”
Step-by-step guide: how to use Code Review SpecialistInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the MIT licence and an attribution note.

    code-review-specialist.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip code-review-specialist.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip code-review-specialist.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Point the agent at specific files or a diff rather than the whole repository to get more precise line-level findings
  • State the language, framework and threat model so the security findings are relevant to your context
  • Treat the severity ratings and quality score as a starting point and verify critical findings yourself before acting

What's inside

  • SKILL.md
  • templates/finding-template.md
  • templates/review-checklist.md

Redistributed unmodified from luongnv89/claude-howto under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.