Code Review Expert

This is a structured code review skill that runs through your git diff with a severity-based framework (P0 through P3) covering SOLID violations, security risks like injection and race conditions, and code quality issues like N+1 queries and error swallowing. It's review-first by design: you get a full report with inline comments and severity ratings, then you choose whether to fix everything, just the critical stuff, or nothing at all. The nice part is it loads specific checklists for security, SOLID, and removal candidates, so you're not just getting generic linter feedback. Good for catching the kind of stuff that slips through automated tools but would get flagged in a senior engineer review.

GitHub stars: 1.1K
last updated: May 22, 2026

View on GitHub

Install

$ npx -y skills add dtsola/xiaoyaosearch --skill code-review-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

Code Review Expert

Overview

Perform a structured review of the current git changes with focus on SOLID, architecture, removal candidates, and security risks. Default to review-only output unless the user asks to implement changes.

Severity Levels

Level	Name	Description	Action
P0	Critical	Security vulnerability, data loss risk, correctness bug	Must block merge
P1	High	Logic error, significant SOLID violation, performance regression	Should fix before merge
P2	Medium	Code smell, maintainability concern, minor SOLID violation	Fix in this PR or create follow-up
P3	Low	Style, naming, minor suggestion	Optional improvement

Workflow

1) Preflight context

Use git status -sb, git diff --stat, and git diff to scope changes.
If needed, use rg or grep to find related modules, usages, and contracts.
Identify entry points, ownership boundaries, and critical paths (auth, payments, data writes, network).

SKILL.md on GitHub