Skip to content

Code Reviewer

Reviews code diffs and files for bugs, security issues, and maintainability, then writes a structured report

Stars
12,176
Licence
MIT
Files
7 files

What it does

Once installed, the agent reviews pull requests and code files like a senior engineer. It first summarizes what the change is trying to do, then checks architecture, code quality, security (such as SQL injection, XSS and hardcoded secrets), performance (such as N+1 queries), and test coverage. It ends with a prioritized report split into critical, major and minor issues, plus praise for good patterns and questions for the author. The skill mainly provides review guidance and report templates; it reads code rather than changing it.

Great for

  • Developers who want a second pair of eyes on a pull request before merging
  • Teams running quick code quality or refactoring audits on a codebase
  • Reviewers who want consistent, structured report formatting

Skip it if

  • Replacing a dedicated security audit or penetration test, since it is a broad, single-pass review and may miss issues (the skill itself points to security-reviewer for deeper work)
  • Reviewing code with no context: the skill asks the agent to summarize intent and may ask the author for clarification, so unexplained changes give weaker results
  • Automated merge decisions without a human, since the verdict is advisory

Try asking

  • “Review this pull request diff and tell me what must be fixed before merging”
  • “Do a code quality audit of the payments module and prioritize the issues”
  • “Check this file for SQL injection, hardcoded secrets and N+1 queries”
  • “Suggest refactoring opportunities in this service and explain the trade-offs”
Step-by-step guide: how to use Code ReviewerInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 7 original files, the MIT licence and an attribution note.

    code-reviewer.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip code-reviewer.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip code-reviewer.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Give the agent the PR description or a clear statement of intent so the context step works well
  • Point it at specific files or a diff rather than a whole repository to keep reviews focused
  • Pair it with the related security-reviewer and test-master skills for deeper security and test analysis

What's inside

  • references/common-issues.md
  • references/feedback-examples.md
  • references/receiving-feedback.md
  • references/report-template.md
  • references/review-checklist.md
  • references/spec-compliance-review.md
  • SKILL.md

Redistributed unmodified from Jeffallan/claude-skills under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.