Skip to content
Get packs

Code Reviewer

Reviews code for bugs, security holes, and performance problems with prioritized, specific feedback.

Source Download skill
Repository
RightNow-AI/openfang
Stars
18,243
Licence
Apache-2.0
Files
1 file

What it does

Once installed, the agent reviews code the way an experienced reviewer would. It checks for correctness bugs, security problems such as injection, path traversal, hardcoded secrets and missing access checks, and performance issues such as queries inside loops or unbounded collections. Feedback is ranked by severity, points to specific lines or patterns, explains the problem and suggests a fix, and is written in a constructive tone that also praises good patterns. The skill is a set of written review guidelines only; it contains no scripts.

Great for

  • Developers who want a second pair of eyes on a pull request before merging
  • Teams that want consistent review priorities (security first, then bugs, then performance, then style)
  • Less experienced developers who want feedback explained with reasons and concrete fixes

Skip it if

  • Projects that need a certified security audit or penetration test, since this is a general checklist-based review and can miss issues or report false positives
  • Situations where the agent is given code it does not have enough context to understand; the skill itself tells the agent to ask questions rather than approve in that case

Try asking

  • “Review this pull request diff for bugs and security issues, most serious first.”
  • “Check this database access function for N+1 queries and missing indexes.”
  • “Look over this file-upload handler for path traversal and secret-handling problems.”
  • “Give me constructive review comments on this module, with suggested fixes for the non-obvious changes.”
Step-by-step guide: how to use Code ReviewerInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.

    code-reviewer.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip code-reviewer.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip code-reviewer.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Paste or point the agent at the specific diff or files, and say which language and framework the project uses so its advice fits.
  • Mention if the project already has an autoformatter or linter so the agent skips style nitpicks, as the skill advises.
  • Treat the output as a first pass: confirm security findings with your own review or tooling before acting on them.

What's inside

  • SKILL.md

Redistributed unmodified from RightNow-AI/openfang under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.