This runs a structured code review against diffs, not full codebases. It auto-detects whether you're working in frontend, backend, CLI, or config files based on directory paths, then loads the relevant checklists. The review covers security basics like hardcoded secrets and command injection, plus LLM-specific smells like placeholder implementations and overly generic abstractions. It also does impact analysis by searching for breaking changes to exports and APIs. Everything gets written to a timestamped markdown report in /tmp with severity levels and line numbers. Best used when you want consistent review criteria across PRs without manually remembering what to check for in each domain.

skills.sh installs
1.2K
GitHub stars
837
last updated
Aug 21, 2026

Install

$ npx -y skills add llama-farm/llamafarm --skill code-review --agent claude-code

Installs into .claude/skills of the current project.

Files

Code Review Skill

You are performing a comprehensive code review on a diff. Your task is to analyze the changed code for security vulnerabilities, anti-patterns, and quality issues.

Input Model

This skill expects a diff to be provided in context before invocation. The caller is responsible for generating the diff.

Example invocations:

  • User pastes PR diff, then runs /code-review
  • Agent runs git diff HEAD~1, then invokes this skill
  • CI tool provides diff content for review

If no diff is present in context, ask the user to provide one or offer to generate one (e.g., git diff, git diff main..HEAD).


Domain Detection

Auto-detect which checklists to apply based on directory paths in the diff:

DirectoryDomainChecklist
designer/FrontendRead frontend.md
server/BackendRead backend.md
rag/BackendRead backend.md
runtimes/universal/BackendRead backend.md
cli/CLI/GoGeneric checks only
config/ConfigGeneric checks only

If the diff spans multiple domains, load all relevant checklists.


Review Process

Sponsors

Details

Repository
github.com/llama-farm/llamafarm
Categories
Frontend Development, Backend & APIs, Security, Git & Pull Requests, Code Review & Quality
First seen
May 16, 2026

More from llama-farm/llamafarm

All 2
1neolabhq avatarcreate-hookneolabhq/context-engineering-kitCreate and configure git hooks with intelligent project analysis, suggestions, and automated testing1.2Kskills.sh installs
2kostja94 avatarblog-page-generatorkostja94/marketing-skillsWhen the user wants to create, optimize, or audit blog index or listing page structure (not a single post). Also use when the user mentions "blog page," "blog i1.2Kskills.sh installs
3antvis avatarantv-g6-graphantvis/chart-visualization-skillsUse this skill whenever the user wants to create, customize, or troubleshoot G6 v5 graph/network visualizations. Triggers include: any mention of 'G6', 'antv g61.2Kskills.sh installs
4uniswap avatarv4-security-foundationsuniswap/uniswap-aiSecurity-first Uniswap v4 hook development. Use when user mentions "v4 hooks", "hook security", "PoolManager", "beforeSwap", "afterSwap", or asks about V4 hook 1.2Kskills.sh installs
5yeachan-heo avatarhudyeachan-heo/oh-my-claudecodeConfigure HUD display options (layout, presets, display elements)1.2Kskills.sh installs
6wshuyi avatartranslate-pdfwshuyi/translate-pdf-skillTranslate PDF documents to any language while preserving original structure, layout, and styling (colors, backgrounds, positions). Use when user wants to: (1) t1.2Kskills.sh installs