code-reviewer

77 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By AutumnsGrove/ClaudeSkills (GitHub) · coding · 38 stars · scanned at commit cf6f6fb

Automated code review with security scanning, quality metrics, and best practices analysis. Use when reviewing code for: (1) Security vulnerabilities and common attack vectors, (2) Code quality issues and maintainability concerns, (3) Performance bottlenecks and optimization opportunities, (4) Best practices and design patterns, (5) Test coverage and testing strategies, (6) Documentation quality and completeness

Works with any agent that supports SKILL.md skills.

What this skill can do

Downloads and installs other software

The author does not mention this.

Found in 7 places.

code-reviewer/README.md, line 45pip install radon bandit safety pylint
code-reviewer/README.md, line 133pip install radon bandit safety pylint
code-reviewer/scripts/review_helper.py, line 14pip install radon bandit safety pylint

Show 4 more

code-reviewer/scripts/review_helper.py, line 69print(" ⚠️ Bandit not installed. Run: pip install bandit")
code-reviewer/scripts/review_helper.py, line 118print(" ⚠️ Radon not installed. Run: pip install radon")
code-reviewer/scripts/review_helper.py, line 157print(" ⚠️ Pylint not installed. Run: pip install pylint")
code-reviewer/scripts/review_helper.py, line 186print(" ⚠️ Safety not installed. Run: pip install safety")

Runs commands on your computer

The author does not mention this. Expected for a coding skill.

Found in 17 places.

code-reviewer/SKILL.md, line 80python scripts/review_helper.py --security-scan path/to/code
code-reviewer/SKILL.md, line 90npm audit
code-reviewer/SKILL.md, line 100gosec ./...

Show 14 more

code-reviewer/SKILL.md, line 312python scripts/review_helper.py --file path/to/file.py --report full
code-reviewer/examples/security_patterns.md, line 59os.system(f"cat {filename}")
code-reviewer/examples/security_patterns.md, line 74subprocess.run(['cat', filename], check=True, shell=False)
code-reviewer/examples/security_patterns.md, line 83- Never use `shell=True` with user input
code-reviewer/scripts/review_helper.py, line 51result = subprocess.run(cmd, capture_output=True, text=True, timeout=60)
code-reviewer/scripts/review_helper.py, line 70except subprocess.TimeoutExpired:
code-reviewer/scripts/review_helper.py, line 95result = subprocess.run(cmd, capture_output=True, text=True, timeout=30)
code-reviewer/scripts/review_helper.py, line 102result = subprocess.run(cmd, capture_output=True, text=True, timeout=30)
code-reviewer/scripts/review_helper.py, line 109result = subprocess.run(cmd, capture_output=True, text=True, timeout=30)
code-reviewer/scripts/review_helper.py, line 119except subprocess.TimeoutExpired:
code-reviewer/scripts/review_helper.py, line 138result = subprocess.run(cmd, capture_output=True, text=True, timeout=60)
code-reviewer/scripts/review_helper.py, line 158except subprocess.TimeoutExpired:
code-reviewer/scripts/review_helper.py, line 177result = subprocess.run(cmd, capture_output=True, text=True, timeout=30)
code-reviewer/scripts/review_helper.py, line 187except subprocess.TimeoutExpired:

Sends data to these websites: api.example.com

This is disclosed by the author in the skill's SKILL.md or README.

Found in 5 places.

code-reviewer/references/performance_guide.md, line 294response = requests.get(url) # Blocks for each request
code-reviewer/references/performance_guide.md, line 309async with aiohttp.ClientSession() as session:
code-reviewer/references/performance_guide.md, line 319return requests.get(url).json()

Show 2 more

code-reviewer/references/performance_guide.md, line 332response = requests.get('https://api.example.com/data')
code-reviewer/references/performance_guide.md, line 338response = requests.get(

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'code-reviewer' ] || [ -L ~/.agents/skills/'code-reviewer' ]; then echo 'A skill folder named code-reviewer already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/AutumnsGrove/ClaudeSkills' "$d" && git -C "$d" checkout --quiet 'cf6f6fb91cfc0c9594942cd629c2217605e47ef5' -- 'code-reviewer' && mkdir -p ~/.agents/skills && cp -R "$d"/'code-reviewer' ~/.agents/skills/'code-reviewer' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'code-reviewer' ~/.claude/skills/'code-reviewer' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for AutumnsGrove/ClaudeSkills shows the score of its lowest-scoring skill.

SkillTrust badge for AutumnsGrove/ClaudeSkills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/AutumnsGrove/ClaudeSkills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/AutumnsGrove/ClaudeSkills/)

Score history

Date	Version	Score
2026-11-07	`cf6f6fb`	77