code-reviewer
Review Code and Pull Requests
Code reviews can miss security, quality, testing, and performance problems. This skill guides Claude, Codex, and Claude Code through a structured review with actionable findings.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "code-reviewer" from https://skillstore.io/skills/dennisliuck-code-reviewer.md and its manifest at https://skillstore.io/api/skills/dennisliuck-code-reviewer/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "code-reviewer". User asks for a review of a new API handler.
Expected outcome:
- Summary: The handler is readable but needs stronger validation.
- Major: Missing authorization checks could expose records to other users.
- Recommendation: Add permission checks and tests for denied access.
Using "code-reviewer". User submits a pull request for database access changes.
Expected outcome:
- Critical: One query builds SQL from user input.
- Recommendation: Use parameterized queries and add injection regression tests.
- Minor: Rename a helper to clarify that it returns active users only.
Using "code-reviewer". User requests maintainability feedback for a complex function.
Expected outcome:
- Summary: The function mixes validation, persistence, and response formatting.
- Recommendation: Extract validation and persistence into separate helpers.
- Testing: Add edge case tests for missing fields and duplicate records.
Security Audit
SafeThe static findings are false positives. The flagged lines are Markdown examples that show unsafe and safe SQL query patterns, not executable commands or reconnaissance behavior. No prompt injection or data exfiltration intent was found in SKILL.md.
Risk Factors
⚙️ External commands (1)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/dennisliuck-code-reviewer/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/dennisliuck-code-reviewer?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/dennisliuck-code-reviewer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dennisliuck-code-reviewer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/dennisliuck-code-reviewer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
DennisLiuCk. (2026). code-reviewer security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dennisliuck-code-reviewer/audits/9BibTeX citation
@techreport{dennisliuck-dennisliuck-code-reviewer-2026,
author = {DennisLiuCk},
title = {code-reviewer security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/dennisliuck-code-reviewer/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "code-reviewer security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "DennisLiuCk"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/dennisliuck-code-reviewer/audits/9"
identifiers:
- type: other
value: "skillstore:dennisliuck-code-reviewer:audit:9"
description: "Skillstore immutable audit report identifier"
Compare variants
9 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
alirezarezvani-code-reviewer
2026-08-21
autumnsgrove-code-reviewer
2026-08-21
davila7-code-reviewer
2026-08-21
curiouslearner-code-reviewer
2026-08-21
sickn33-code-reviewer
2026-08-21
9tykeshav-code-reviewer
2026-08-21
dennisliuck-code-reviewer
2026-08-21
google-gemini-code-reviewer
2026-08-21
shubhamsaboo-code-reviewer
2026-08-21
Skillstore Score
Why this score Evidence Confidence: HighWhat You Can Build
Review a pull request
Check a proposed change for correctness, maintainability, test coverage, and documentation gaps before merge.
Check security risks before release
Focus review attention on validation, injection, XSS, authorization, and secret handling issues.
Improve legacy code maintainability
Identify complex logic, duplication, unclear names, and refactoring options in existing modules.
Try These Prompts
Review this code for readability, bugs, and simple improvements. List the most important issues first and explain each fix.
Review this pull request as a teammate. Focus on correctness, maintainability, tests, and documentation. Separate blocking issues from optional improvements.
Review this implementation for input validation, injection risks, authorization checks, XSS, and secret handling. Provide evidence and safer alternatives.
Review this change for design tradeoffs, scalability, failure modes, testing strategy, and long-term maintainability. Identify risks, assumptions, and refactoring options.
Best Practices
- Provide the full diff, related requirements, and test results when available.
- Ask for severity-ranked findings when the change is large.
- Use the review feedback to update tests and documentation.
Avoid
- Do not ask for approval based only on a small snippet of a larger change.
- Do not treat suggestions as proof that code is secure.
- Do not ignore project conventions when applying recommendations.
Frequently Asked Questions
Can this skill review any programming language?
Does it run code or tests?
Is it useful for security reviews?
How should I provide code?
Will it rewrite code for me?
Does it work with Claude Code and Codex?
Developer Details
Author
DennisLiuCkLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Repository
https://github.com/DennisLiuCk/cc-toolkit/tree/main/plugins/dev-tools/skills/code-reviewerRef
72d5025b022c77f7a51bdf5c1637c689c80e89d1
Maintenance freshness
7/18/2026
Usage
10 downloads · 211 views
File structure
📄 SKILL.md