Skills code-reviewer
๐Ÿ“ฆ

code-reviewer

v1.0 Content revision r1 Safe โšก Contains scriptsโš™๏ธ External commands๐ŸŒ Network access

Review Code for Security and Quality

Code reviews miss security and reliability issues when guidance is inconsistent. This skill gives structured review criteria for security, performance, correctness, maintainability, and tests.

Supports: Claude Codex Code(CC)
๐Ÿฅ‰ 77 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "code-reviewer" from https://skillstore.io/skills/shubhamsaboo-code-reviewer.md and its manifest at https://skillstore.io/api/skills/shubhamsaboo-code-reviewer/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "code-reviewer". A small API handler builds a database query from a user supplied identifier.

Expected outcome:

  • Security Issues: CRITICAL SQL injection risk in the user lookup. Fix by using a parameterized query and validating the identifier.
  • Summary: merge should wait until the query is corrected and covered by tests.

Using "code-reviewer". A pull request lists posts and then loads each author inside a loop.

Expected outcome:

  • Performance Issues: HIGH N+1 query risk in the post listing path. Fix with eager loading, a join, or batched lookup.
  • Testing: add a query count check for the list endpoint.

Using "code-reviewer". A TypeScript function catches all errors and returns a generic failure message.

Expected outcome:

  • Correctness Issues: HIGH unclear error handling hides timeout, network, and response parsing failures.
  • Fix: catch specific errors, preserve useful context, and test error paths.

Security Audit

Safe
v3 โ€ข 7/9/2026 Open versioned report

Static analysis flagged scripts, network calls, command execution, and keylogger terms, but review found they are educational examples inside code review guidance. No evidence found of active execution, data exfiltration, prompt injection, or malicious intent in the skill files.

8
Files scanned
1,474
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/shubhamsaboo-code-reviewer/audits/3?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/shubhamsaboo-code-reviewer/security.svg)](https://skillstore.io/skills/shubhamsaboo-code-reviewer?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/shubhamsaboo-code-reviewer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/shubhamsaboo-code-reviewer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/shubhamsaboo-code-reviewer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

shubhamsaboo. (2026). code-reviewer security audit report (audit version 3) [Author version 1.0]. Skillstore. https://skillstore.io/skills/shubhamsaboo-code-reviewer/audits/3

BibTeX citation

@techreport{shubhamsaboo-shubhamsaboo-code-reviewer-2026, author = {shubhamsaboo}, title = {code-reviewer security audit report (audit version 3)}, institution = {Skillstore}, year = {2026}, number = {3}, url = {https://skillstore.io/skills/shubhamsaboo-code-reviewer/audits/3}, note = {Author version 1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "code-reviewer security audit report (audit version 3)" version: "1.0" type: report authors: - name: "shubhamsaboo" date-released: "2026-07-09" url: "https://skillstore.io/skills/shubhamsaboo-code-reviewer/audits/3" identifiers: - type: other value: "skillstore:shubhamsaboo-code-reviewer:audit:3" description: "Skillstore immutable audit report identifier"

Compare variants

9 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage
alirezarezvani Recommended

alirezarezvani-code-reviewer

Skillstore Score 83
Evidence Confidence High
Skillstore usage 365
Updated

2026-08-21

autumnsgrove-code-reviewer

Skillstore Score 83
Evidence Confidence High
Skillstore usage 77
Updated

2026-08-21

davila7-code-reviewer

Skillstore Score 81
Evidence Confidence High
Skillstore usage 13
Updated

2026-08-21

curiouslearner-code-reviewer

Skillstore Score 78
Evidence Confidence High
Skillstore usage 47
Updated

2026-08-21

sickn33-code-reviewer

Skillstore Score 78
Evidence Confidence High
Skillstore usage 18
Updated

2026-08-21

9tykeshav-code-reviewer

Skillstore Score 78
Evidence Confidence High
Skillstore usage 15
Updated

2026-08-21

dennisliuck-code-reviewer

Skillstore Score 78
Evidence Confidence High
Skillstore usage 14
Updated

2026-08-21

google-gemini-code-reviewer

Skillstore Score 78
Evidence Confidence High
Skillstore usage 11
Updated

2026-08-21

shubhamsaboo Current

shubhamsaboo-code-reviewer

Skillstore Score 77
Evidence Confidence Medium
Skillstore usage 6
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance

What You Can Build

Review a Pull Request

Check a proposed change for security, correctness, performance, maintainability, and missing tests before merge.

Audit Security-Sensitive Code

Focus review attention on SQL injection, XSS, secrets, authorization assumptions, and insecure data handling.

Improve Code Review Consistency

Use a shared checklist and severity model when reviewing code across a team.

Try These Prompts

Review a Small Change
Review this code for security, correctness, performance, and maintainability. Return findings by severity with line references and fixes.
Check a Pull Request
Review the diff below as a pull request. Focus on SQL injection, XSS, N+1 queries, error handling, names, type hints, and tests.
Audit a Feature
Audit this feature for security and reliability risks. Include missing validation, authorization assumptions, data exposure, performance hotspots, and required tests.
Run a Release Gate
Perform a blocking pre-merge review. Separate must-fix issues from optional improvements, explain impact, and propose minimal safe changes.

Best Practices

  • Provide the full diff or relevant files so the review can cite exact locations.
  • Ask for severity-ranked findings when deciding whether a change can merge.
  • Include framework, database, and runtime context for more precise recommendations.

Avoid

  • Do not ask for only style feedback when security or correctness matters.
  • Do not paste partial code that hides validation, authentication, or database access.
  • Do not treat the review as a replacement for tests, scanners, or human approval.

Frequently Asked Questions

What does this skill review?
It reviews security, performance, correctness, maintainability, and test coverage using a structured checklist.
Can it review pull requests?
Yes. Provide the diff or changed files, and ask for findings by severity and merge impact.
Does it run code or tests?
No. It reviews supplied code and recommends tests, but it does not execute the project.
Which security issues are covered?
The guidance covers SQL injection, XSS, hardcoded secrets, authorization checks, and insecure data handling.
Can it find performance problems?
Yes. It includes checks for N+1 queries, redundant database calls, caching gaps, and inefficient algorithms.
How should I format my request?
Include code, line numbers when available, framework context, and the review goals you care about most.

Developer Details

License

MIT

Author version

v1.0

Skillstore revision

r1

Version notice

The author-declared version is not valid SemVer.

Ref

3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88

Maintenance freshness

7/18/2026

Usage

4 downloads ยท 0 views

More from shubhamsaboo

View all
View all