code-review-assistant
Review Pull Requests with Multi-Agent Checks
Manual PR review can miss security, test, and quality issues. This skill coordinates specialized checks and prepares merge feedback for Claude, Codex, and Claude Code workflows.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "code-review-assistant" from https://skillstore.io/skills/dnyoussef-code-review-assistant.md and its manifest at https://skillstore.io/api/skills/dnyoussef-code-review-assistant/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "code-review-assistant". Review PR 123 with all checks enabled.
Expected outcome:
Overall score 84. Merge ready with warnings. Security passed, tests need one coverage improvement, and documentation needs release notes.
Using "code-review-assistant". Review PR 123 with security focus only.
Expected outcome:
Security review found one blocking secret-handling issue and two medium validation concerns. Request changes until the blocker is fixed.
Using "code-review-assistant". Generate fix suggestions for review findings.
Expected outcome:
Suggested fixes include adding input validation, improving boundary tests, and updating the API usage notes before approval.
Security Audit
High RiskMost static backtick and /dev/null alerts are Markdown or benign shell redirection false positives. The skill still contains a real Bash automation workflow that runs unpinned npx tools, invokes GitHub CLI actions, and writes generated PR artifacts.
Confirmed security concerns (3)
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (48)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/dnyoussef-code-review-assistant/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/dnyoussef-code-review-assistant?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/dnyoussef-code-review-assistant?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dnyoussef-code-review-assistant/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/dnyoussef-code-review-assistant.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
DNYoussef. (2026). code-review-assistant security audit report (audit version 8) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/dnyoussef-code-review-assistant/audits/8BibTeX citation
@techreport{dnyoussef-dnyoussef-code-review-assistant-2026,
author = {DNYoussef},
title = {code-review-assistant security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/dnyoussef-code-review-assistant/audits/8},
note = {Author version 1.0.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "code-review-assistant security audit report (audit version 8)"
version: "1.0.0"
type: report
authors:
- name: "DNYoussef"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/dnyoussef-code-review-assistant/audits/8"
identifiers:
- type: other
value: "skillstore:dnyoussef-code-review-assistant:audit:8"
description: "Skillstore immutable audit report identifier"
Compare variants
2 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
zhangchenlai-dev-code-review-assistant
2026-08-21
dnyoussef-code-review-assistant
2026-08-21
Skillstore Score
Why this score Evidence Confidence: MediumWhat You Can Build
Pre-Merge Repository Review
Run a broad PR quality check before maintainers decide whether a change is ready to merge.
Focused Security Pass
Review changed files for unsafe patterns, secrets, and critical security blockers before approval.
Release Readiness Audit
Combine quality, test, and documentation signals into a merge readiness summary for release branches.
Try These Prompts
Review pull request 123 with all default checks. Summarize blockers, warnings, suggestions, and merge readiness.
Review pull request 123 with focus areas security and tests. Prioritize issues that should block merge.
Review pull request 123 and generate fix suggestions for each confirmed issue. Group suggestions by severity and file area.
Review pull request 123 for release readiness. Do not approve or request changes until I confirm the final decision.
Best Practices
- Run the skill from a clean working tree with an authenticated GitHub CLI session.
- Use comment-only or dry-run behavior when testing it on active repositories.
- Confirm generated findings before approving or requesting changes on protected branches.
Avoid
- Running the workflow on untrusted repositories with broad GitHub tokens.
- Letting automated approvals replace required human review for sensitive changes.
- Treating generated scores as final proof that a pull request is safe.
Frequently Asked Questions
Does this skill need GitHub access?
Can it approve a pull request?
Does it write files locally?
Can it generate fixes automatically?
Is it limited to security review?
Should it run on protected branches?
Developer Details
Author
DNYoussefLicense
MIT
Author version
v1.0.0
Skillstore revision
r1
Repository
https://github.com/DNYoussef/ai-chrome-extension/tree/main/.claude/skills/code-review-assistantRef
c579efd02184f1128d6741d16e6c8d951d7d4208
Maintenance freshness
7/18/2026
Usage
5 downloads · 175 views
File structure
📄 SKILL.md