code-review-pro

95 / 100 · Low risk

Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.

By OneWave-AI/claude-skills (GitHub) · coding · 421 stars · scanned at commit b2267d9

Performs a deep code review of files, modules, a diff, or a branch - finding security vulnerabilities (mapped to OWASP Top 10:2025), correctness bugs, performance problems, and maintainability issues - and returns severity-ranked findings with evidence and concrete fixes. Use when the user asks to review, audit, or sanity-check code, asks "is this safe", "what's wrong with this", "find bugs", or wants a security or performance pass before shipping. For posting line comments on a GitHub pull req…

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. Expected for a coding skill.

Found in 2 places.

code-review-pro/references/checklist.md, line 20| A05 | Injection | String-built SQL, shell commands (`exec`, `subprocess(shell=True)`), template injection, NoSQL operator injection, XSS via raw HTML sinks, p
code-review-pro/references/checklist.md, line 64- **Python**: mutable default arguments, bare `except:`, `subprocess` with `shell=True`, missing timeouts on `requests` calls.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'code-review-pro' ] || [ -L ~/.agents/skills/'code-review-pro' ]; then echo 'A skill folder named code-review-pro already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/OneWave-AI/claude-skills' "$d" && git -C "$d" checkout --quiet 'b2267d9171af4f56848d82992381b20b89b44056' -- 'code-review-pro' && mkdir -p ~/.agents/skills && cp -R "$d"/'code-review-pro' ~/.agents/skills/'code-review-pro' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'code-review-pro' ~/.claude/skills/'code-review-pro' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for OneWave-AI/claude-skills shows the score of its lowest-scoring skill.

SkillTrust badge for OneWave-AI/claude-skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/OneWave-AI/claude-skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/OneWave-AI/claude-skills/)

Score history

Date	Version	Score
2026-11-07	`b2267d9`	100