Skill425 repo starsupdated 4mo ago

code-review

The code-review skill provides a structured framework for evaluating code submissions across five dimensions: functionality, code quality, security, performance, and testing. Use this skill when reviewing pull requests, analyzing code for potential issues, or providing systematic feedback on code quality and best practices. It generates findings with specific locations, severity levels, and actionable suggestions formatted consistently for clarity.

View source Repository: station

Install in Claude Code

Copy

git clone --depth 1 https://github.com/cloudshipai/station /tmp/code-review && cp -r /tmp/code-review/environments/default/skills/user/code-review ~/.claude/skills/code-review

Then start a new Claude Code session; the skill loads automatically.

Definition

SKILL.md

# Code Review Skill

## When to Use
- User asks for code review or feedback
- Reviewing a pull request or diff
- Analyzing code quality or security

## Review Checklist

### 1. Functionality
- [ ] Does the code do what it's supposed to?
- [ ] Are edge cases handled?
- [ ] Is error handling appropriate?

### 2. Code Quality
- [ ] Is the code readable and maintainable?
- [ ] Are functions and variables named clearly?
- [ ] Is there unnecessary duplication?
- [ ] Are comments helpful and accurate?

### 3. Security
- [ ] Input validation present?
- [ ] No hardcoded secrets?
- [ ] SQL injection prevention?
- [ ] XSS prevention?

### 4. Performance
- [ ] Efficient algorithms used?
- [ ] No N+1 query problems?
- [ ] Resources properly managed?

### 5. Testing
- [ ] Tests cover main functionality?
- [ ] Edge cases tested?
- [ ] Tests are readable?

## Output Format

For each finding, provide:
1. **Location**: File and line number
2. **Severity**: Critical / High / Medium / Low
3. **Issue**: Clear description of the problem
4. **Suggestion**: How to fix it
5. **Example**: Code snippet showing the fix (if applicable)

## Example Review Comment

**Location**: `src/api/users.go:42`
**Severity**: High
**Issue**: SQL query built using string concatenation
**Suggestion**: Use parameterized queries to prevent SQL injection
**Example**:
```go
// Before (vulnerable)
query := "SELECT * FROM users WHERE id = " + userID

// After (safe)
query := "SELECT * FROM users WHERE id = ?"
db.Query(query, userID)
```