A structured code review workflow that catches the usual suspects: N+1 queries, SQL injection risks, magic numbers, and architectural misfits. It walks through context, structure, details, tests, then delivers prioritized feedback in a fixed format (critical, major, minor, plus what's done well). The checkpoints are smart, like forcing you to summarize the PR's intent in one sentence before reviewing, which prevents reviewing code you don't actually understand. Includes quick reference patterns showing bad versus good for common issues and pulls from detailed guides on feedback quality and spec compliance. Built for PR reviews and code audits where you want consistent, actionable output instead of ad hoc comments.

skills.sh installs
6.9K
GitHub stars
12.3K
last updated
Aug 21, 2026

Install

$ npx -y skills add jeffallan/claude-skills --skill code-reviewer --agent claude-code

Installs into .claude/skills of the current project.

Files

Code Reviewer

Senior engineer conducting thorough, constructive code reviews that improve quality and share knowledge.

When to Use This Skill

  • Reviewing pull requests
  • Conducting code quality audits
  • Identifying refactoring opportunities
  • Checking for security vulnerabilities
  • Validating architectural decisions

Core Workflow

  1. Context — Read PR description, understand the problem being solved. Checkpoint: Summarize the PR's intent in one sentence before proceeding. If you cannot, ask the author to clarify.
  2. Structure — Review architecture and design decisions. Ask: Does this follow existing patterns in the codebase? Are new abstractions justified?
  3. Details — Check code quality, security, and performance. Apply the checks in the Reference Guide below. Ask: Are there N+1 queries, hardcoded secrets, or injection risks?
  4. Tests — Validate test coverage and quality. Ask: Are edge cases covered? Do tests assert behavior, not implementation?
  5. Feedback — Produce a categorized report using the Output Template. If critical issues are found in step 3, note them immediately and do not wait until the end.

Sponsors

Details

Repository
github.com/jeffallan/claude-skills
Categories
Testing & QA, Security, Git & Pull Requests, Code Review & Quality, Debugging, Databases
First seen
May 16, 2026

More from jeffallan/claude-skills

All 66
1dotnet avatarrun-testsdotnet/skillsRecommend or run the exact `dotnet test` command. ALWAYS use when the user asks to run, filter, or troubleshoot .NET tests or wants the precise command, flags, 6.6Kskills.sh installs
2jeffallan avatarnestjs-expertjeffallan/claude-skillsCreates and configures NestJS modules, controllers, services, DTOs, guards, and interceptors for enterprise-grade TypeScript backend applications. Use when buil6.2Kskills.sh installs
3pydantic avatarbuilding-pydantic-ai-agentspydantic/skillsBuild AI agents with Pydantic AI — tools, capabilities (including on-demand loading), structured output, streaming, testing, and multi-agent patterns. Use when 6.2Kskills.sh installs
4wondelai avatarlean-startupwondelai/skillsDesign MVPs, validated learning experiments, and pivot-or-persevere decisions using Build-Measure-Learn. Use when the user mentions "MVP scope", "validated lear6.1Kskills.sh installs
5trailofbits avataraudit-prep-assistanttrailofbits/skillsPrepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead6.1Kskills.sh installs
6wondelai avatardesign-sprintwondelai/skillsRun a structured 5-day process to prototype, test, and validate product ideas with real users. Use when the user mentions "design sprint", "validate before we b5.7Kskills.sh installs