
Code Reviewer
Reviews code diffs and files for bugs, security issues, and maintainability, then writes a structured report
- Repository
- Jeffallan/claude-skills
- Stars
- 12,176
- Licence
- MIT
- Files
- 7 files
What it does
Once installed, the agent reviews pull requests and code files like a senior engineer. It first summarizes what the change is trying to do, then checks architecture, code quality, security (such as SQL injection, XSS and hardcoded secrets), performance (such as N+1 queries), and test coverage. It ends with a prioritized report split into critical, major and minor issues, plus praise for good patterns and questions for the author. The skill mainly provides review guidance and report templates; it reads code rather than changing it.
Great for
- Developers who want a second pair of eyes on a pull request before merging
- Teams running quick code quality or refactoring audits on a codebase
- Reviewers who want consistent, structured report formatting
Skip it if
- Replacing a dedicated security audit or penetration test, since it is a broad, single-pass review and may miss issues (the skill itself points to security-reviewer for deeper work)
- Reviewing code with no context: the skill asks the agent to summarize intent and may ask the author for clarification, so unexplained changes give weaker results
- Automated merge decisions without a human, since the verdict is advisory
Try asking
- “Review this pull request diff and tell me what must be fixed before merging”
- “Do a code quality audit of the payments module and prioritize the issues”
- “Check this file for SQL injection, hardcoded secrets and N+1 queries”
- “Suggest refactoring opportunities in this service and explain the trade-offs”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 7 original files, the MIT licence and an attribution note.
code-reviewer.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip code-reviewer.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip code-reviewer.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Give the agent the PR description or a clear statement of intent so the context step works well
- Point it at specific files or a diff rather than a whole repository to keep reviews focused
- Pair it with the related security-reviewer and test-master skills for deeper security and test analysis
What's inside
- references/common-issues.md
- references/feedback-examples.md
- references/receiving-feedback.md
- references/report-template.md
- references/review-checklist.md
- references/spec-compliance-review.md
- SKILL.md
Redistributed unmodified from Jeffallan/claude-skills under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.