code-review
Perform thorough code reviews with security, performance, and maintainability analysis. Use when user asks to review code, check for bugs, or audit a codebase.
Before you install
- Last update
- Files in folder
- 1
- Scripts
- No script files found
- SKILL.md size
- 4.2 KB (about 1,067 tokens of context each time it loads)
- License
- MIT
- Source on GitHub
- shareAI-lab/learn-claude-code
Skills are plain text instructions the agent follows, sometimes with scripts. Check the source, prefer repositories with many installs and stars, and read any script it ships.
Install
npx skills add shareAI-lab/learn-claude-code@code-reviewRuns in a terminal with Node.js 18 or newer. Add -y to skip the prompts and -g to install for every project instead of this one.
Install for your agent
npx skills add shareAI-lab/learn-claude-code@code-review --agent claude-code -y- Project install writes to
.claude/skills/code-review- Global install writes to
~/.claude/skills/code-review
Start a new session afterwards so the agent picks the skill up. In Claude Code you can also call it directly with /code-review.
What it does
Code Review Skill You now have expertise in conducting comprehensive code reviews. Follow this structured approach: Review Checklist 1. Security (Critical) Check for: - [ ] Injection vulnerabilities: SQL, command, XSS, template injection - [ ] Authentication issues: Hardcoded credentials, weak auth - [ ] Authorization flaws: Missing access controls, IDOR - [ ] Data exposure: Sensitive data in logs, error messages - [ ] Cryptography: Weak algorithms, improper key management - [ ] Dependencies: Known vulnerabilities (check with npm audit, pip-audit) 2. Correctness Check for: - [ ] Logic errors:…
Excerpt from the skill's own SKILL.md. Read the full file on GitHub before installing: skills run with your agent's permissions.
Categories
Related skills
- agent-builder
shareAI-lab/learn-claude-code
Design and build AI agents for any domain. Use when users: (1) ask to "create an agent", "build an assistant", or "design an AI system" (2) want to understand agent architecture, agentic patterns, or autonomous AI (3) need help with capabilities, subagents, planning, or skill mechanisms (4) ask about Claude Code, Cursor, or similar agent internals (5) want to build agents for business, research, creative, or operational tasks Keywords: agent, assistant, autonomous, workflow, tool use, multi-step, orchestration
- pdf
shareAI-lab/learn-claude-code
Process PDF files - extract text, create PDFs, merge documents. Use when user asks to read PDF, create PDF, or work with PDF files.
- mcp-builder
shareAI-lab/learn-claude-code
Build MCP (Model Context Protocol) servers that give Claude new capabilities. Use when user wants to create an MCP server, add tools to Claude, or integrate external services.
- vercel-react-best-practices
vercel-labs/agent-skills
React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
- web-design-guidelines
vercel-labs/agent-skills
Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "check accessibility", "audit design", "review UX", or "check my site against best practices".
- design-taste-frontend
leonxlnx/taste-skill
tasteskill v2, the anti-slop frontend skill. Art direction for websites, distilled from a study of 247 curated gallery sites (One Page Love, Awwwards Sites of the Day). Deals researched directions (idea, composition, type, palette, photographs, section blueprints) from a library, enforces a strict no-slop house style with a real-browser inspector, and runs a look-and-fix loop on screenshots. Use this whenever you build, design, redesign, restyle, polish or review a landing page, marketing site, portfolio, product page, one-pager, hero or any public-facing web page, in any stack (HTML/CSS, React, Next.js, Vue, Svelte, Astro, Tailwind) — also when the user says a page looks generic, templated, "AI-made", sloppy, or asks to make it look designed, premium, award-level or less like every other site. Not for dashboards or app screens.