CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

code-reviewer

Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback. Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues. Invoke for PR reviews, code quality checks, refactoring suggestions, review code, code quality. Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass.

67

Quality

84%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured skill body: actionable workflow with checkpoints, executable code examples, crisp constraints, and an excellent load-when reference table backed by a real, complete bundle. Its weakness is redundancy — inline quick-reference patterns and a concept-name list duplicate content Claude already knows or that is already delegated to reference files.

Suggestions

Remove the 'Review Patterns (Quick Reference)' section or reduce it to a one-line pointer: those bad/good examples (N+1, magic numbers, SQL injection) already live in references/common-issues.md, and the reference table already routes to it.

Delete the 'Knowledge Reference' line — naming SOLID, DRY, KISS, YAGNI, OWASP Top 10 adds no instruction Claude doesn't already have; if kept, fold it into the review-checklist reference instead.

Convert the soft guiding questions in workflow steps 2–4 into explicit checkpoints like step 1's (e.g., 'Checkpoint: list the abstractions introduced and whether each has a second caller') to tighten validation coverage.

DimensionReasoningScore

Conciseness

Mostly efficient, but the 'Review Patterns (Quick Reference)' section duplicates material Claude already knows and that is already delegated to references/common-issues.md (the table itself says 'Load When: N+1 queries, magic numbers, patterns'), and the 'Knowledge Reference' line ("SOLID, DRY, KISS, YAGNI, design patterns, OWASP Top 10...") is pure concept-name filler. Not 2 because the rest of the body — workflow, constraints, output template — is tight and earns its tokens.

3 / 5

Actionability

Fully executable guidance: a 5-step workflow with concrete sub-actions, copy-paste-ready bad/good Python examples (parameterized queries, prefetch_related, named constants), explicit MUST DO/MUST NOT DO constraints, and a 7-section output template with a concrete verdict enum. Specific examples cover the common review cases. Not 4 because no meaningful gaps remain in the inline guidance.

5 / 5

Workflow Clarity

Clear 5-step sequence (Context → Structure → Details → Tests → Feedback) with an explicit checkpoint in step 1 ('Summarize the PR's intent in one sentence before proceeding. If you cannot, ask the author to clarify') and an escalation rule in step 5. Not 5 because steps 2–4 use only soft guiding questions ('Ask: ...') rather than explicit pass/fail validation checkpoints, leaving minor validation gaps.

4 / 5

Progressive Disclosure

The Reference Guide table signals all six real reference files (verified present in references/) one level deep, each with a specific 'Load When' condition — well-organized navigation. Not 5 because the inline 'Review Patterns' section duplicates content that belongs in references/common-issues.md, and the 'Knowledge Reference' section is an unstructured pointer that adds no navigation value; not 3 because the split itself is otherwise appropriate and clearly signaled.

4 / 5

Total

16

/

20

Passed

Description

88%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: third-person voice, comprehensive concrete capabilities with named vulnerability examples, explicit 'Use when' triggers, and deliberate boundary-setting against sibling skills. Weaknesses are limited to slightly generic trigger phrasing and minor overlap with the security-reviewer niche it acknowledges.

DimensionReasoningScore

Specificity

The description lists multiple specific concrete actions — 'Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback' — with named examples and comprehensive coverage of the review domain. Not 4 because coverage extends beyond 'minor gaps': input (diffs/files), issue taxonomy, and output format (prioritized structured report) are all specified.

5 / 5

Completeness

Explicitly answers both what ('Analyzes code diffs... produces a structured review report with prioritized, actionable feedback') and when ('Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues') with concrete trigger phrases. Matches the 5-anchor example structure exactly.

5 / 5

Trigger Term Quality

Good keyword coverage: 'reviewing pull requests', 'PR reviews', 'code quality audits', 'refactoring', 'review code', 'security issues'. Not 5 because it misses common natural variations like the exact phrase 'code review', and 'code quality' appears twice — slightly redundant rather than broadened with synonyms.

4 / 5

Distinctiveness Conflict Risk

Explicitly positions itself — 'Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass' — which manages overlap well. Not 5 because triggers like 'review code, code quality' and 'checking for security issues' overlap with the very security-reviewer skill it names, keeping minor conflict risk.

4 / 5

Total

18

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

Total

15

/

16

Passed

Repository

Jeffallan/claude-skills

Path

skills/code-reviewer/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.