
Codebase Review
This is a comprehensive codebase health check that runs SAST scans, reviews architecture patterns, and scores your project 0-100 based on severity-weighted findings. It pulls in security audits (including OWASP checks and AI-generated code vulnerabilities), examines your largest files against multiple lenses like silent failures and type design, and outputs a phased improvement plan. The scoring is unforgiving: any critical issue caps you at 40/100, with deductions ranging from -1 for low-priority items to -15 for critical flaws. What's interesting is the feedback loop requirement. Every high-severity finding forces you to update the relevant skill's anti-pattern rules and test assertions, so the tool theoretically gets smarter with each audit.
- GitHub stars
- 504
- last updated
- Jun 11, 2026
Install
$ npx -y skills add hoangnguyen0403/agent-skills-standard --skill codebase-review --agent claude-codeInstalls into .claude/skills of the current project.
Files
Codebase Review Skill
[!IMPORTANT] Review an entire codebase for architecture, engineering health, and exploitable risk; generate a prioritized remediation plan, an evidence-anchored system knowledge document, or both.
Optional args: slug=, ticket=<id/url>, mode=interactive|autonomous|channel, channel=, auto_continue=true|false, profile=business|hybrid|technical.
Instructions
When the user asks to perform this workflow, execute the following steps:
🛸 Codebase Review Orchestrator
Goal: Map a codebase from evidence, expose systemic risk, and produce the review and/or knowledge artifact requested.
Steps
Sponsors
Details
- Repository
- github.com/hoangnguyen0403/agent-skills-standard
- Categories
- Git & Pull Requests, Code Review & Quality, AI & Agent Building, Productivity & Planning
- License
- Apache-2.0
- First seen
- Jun 11, 2026
More from hoangnguyen0403/agent-skills-standard
All 28- Deploy Release
- Design Solution
- Dev Fix
- Implement Feature
- Implementation Readiness
- Pentest
- Plan Feature
- Publish Notes
- Retro Learn
- Review Ticket
- Sdlc
- Security Test
- Session Report
- Skill Benchmark
- Skill Creator
- Traceability Audit
- Update Docs
- Verify Bug
- Verify Work
- Zephyr Coverage Analysis
- Battle Test
- Brainstorm Feature
- Caveman
- Caveman Commit