CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

code-reviewer

Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback. Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues. Invoke for PR reviews, code quality checks, refactoring suggestions, review code, code quality. Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass.

Quality

85%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

Well-structured instruction skill with a clear sequenced workflow, a concrete output template, and exemplary progressive disclosure via a Load-When reference table pointing at six real one-level-deep files. Its main weakness is token efficiency: it re-teaches concepts Claude already knows (N+1, magic numbers, SQL injection) and closes with a redundant topic list, both of which could be trimmed or moved to references.

Suggestions

Cut or drastically shrink the 'Review Patterns (Quick Reference)' section: N+1 queries, magic numbers, and SQL injection bad/good examples re-teach concepts Claude already knows — a one-line prompt ('check for N+1, injection, magic numbers — see references/common-issues.md for patterns') would preserve the trigger at a fraction of the tokens.

Replace the 'Knowledge Reference' line ('SOLID, DRY, KISS, YAGNI, design patterns, OWASP Top 10...') with either nothing or one actionable instruction (e.g., 'Apply OWASP Top 10 as the security baseline'), since a bare topic list gives Claude no guidance it doesn't already have.

Add an explicit validation checkpoint to the Tests step (e.g., 'If a behavior change has no covering test, flag it as a critical issue') so every workflow phase has a concrete gate rather than only step 1.

DimensionReasoningScore

Conciseness

The body is mostly efficient, but the 'Review Patterns (Quick Reference)' section spends three full code blocks illustrating N+1 queries, magic numbers, and SQL injection — concepts Claude already knows — and the 'Knowledge Reference' line ('SOLID, DRY, KISS, YAGNI, design patterns...') is a bare topic list that adds no information. This is more than the minor trimming of a 4, fitting 'some unnecessary explanation or could be tightened'.

3 / 5

Actionability

The guidance is mostly executable: a numbered 5-step workflow with concrete questions ('Are there N+1 queries, hardcoded secrets, or injection risks?'), a 7-section Output Template, and explicit MUST DO / MUST NOT constraints. It falls short of a 5 because some steps defer detail ('Apply the checks in the Reference Guide below') and the Knowledge Reference gives topics without any actionable instruction.

4 / 5

Workflow Clarity

A clear 5-step sequence with an explicit early checkpoint ('Summarize the PR's intent in one sentence before proceeding. If you cannot, ask the author to clarify') and mid-process escalation ('If critical issues are found in step 3, note them immediately'). Only one formal checkpoint exists and the test-review step has no validate-feedback loop, matching 'clear sequence with most checkpoints present; minor validation gaps'.

4 / 5

Progressive Disclosure

The Reference Guide table signals six real, verified reference files with explicit 'Load When' triggers, all one level deep with no nested references, while the body stays a concise overview. This matches the top anchor of a clear overview with well-signaled one-level-deep references.

5 / 5

Total

16

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description that concretely states capabilities, includes an explicit 'Use when' trigger clause, and even disambiguates itself from related specialist skills. The only weakness is the redundant 'Invoke for...' trigger list that repeats terms ('code quality' twice) instead of broadening coverage with additional natural phrasings.

DimensionReasoningScore

Specificity

Lists multiple concrete actions with named specifics — 'security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns' — plus the output form ('structured review report with prioritized, actionable feedback'). This matches the comprehensive-coverage anchor; it goes beyond the score-4 example by specifying both the issues found and the deliverable.

5 / 5

Completeness

Clearly answers both: the 'what' ('Analyzes code diffs and files to identify... then produces a structured review report') and an explicit 'when' clause ('Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues') with concrete trigger phrases, matching the top anchor.

5 / 5

Trigger Term Quality

Good natural-term coverage with synonyms ('reviewing pull requests' / 'PR reviews', 'refactoring opportunities' / 'refactoring suggestions'), but common phrasings like 'look over my code' or 'review this diff' are absent and 'code quality' is listed twice, indicating padding rather than the full synonym/variation coverage of a 5.

4 / 5

Distinctiveness Conflict Risk

Explicitly carves out its niche against siblings — 'Complements specialized skills (security-reviewer, test-master) by providing broad-scope review... in a single pass' — giving it a clear scope and distinct triggers with minimal conflict risk, matching the top anchor rather than the minor-overlap wording of a 4.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

Jeffallan/claude-skills

Path

skills/code-reviewer/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.