Claude MarketplacesSubmit
onewave-ai avatar

Code Review Pro

onewave-ai/claude-skills

This is your systematic code reviewer that catches what you miss in pull requests. It prioritizes security first (SQL injection, XSS, auth holes), then moves through performance bottlenecks like N+1 queries and memory leaks, code quality issues, and best practice violations. Every finding comes with before/after code snippets and severity ratings from critical to low priority. The output format is solid: grouped by urgency, includes a quick wins section for high impact fixes, and actually acknowledges what you did right. Use it when you need a thorough audit beyond linter warnings, especially on unfamiliar codebases or before production deploys.

skills.sh installs
2.6K
GitHub stars
422
last updated
Aug 21, 2026
View on GitHub

Install

$ npx -y skills add onewave-ai/claude-skills --skill code-review-pro --agent claude-code

Installs into .claude/skills of the current project.

Files

Code Review Pro

Find the problems that matter, prove each one, and show the fix. A short list of real issues beats a long list of maybes.

Workflow

  1. Set the scope. Decide what is under review: a pasted snippet, specific files, the working-tree diff (git diff, git diff --staged), or a branch against its base (git diff main...HEAD). For a diff, review the changed lines but read enough surrounding code to know how they are called.

  2. Learn the context before judging. Identify language, framework and version (check package.json, pyproject.toml, go.mod, and so on), how the code is reached (HTTP handler, job, CLI, library), what input is untrusted, and any repo conventions (linters, CLAUDE.md, existing patterns). A pattern that is a bug in one framework can be safe in another; for example, React escapes JSX text, so XSS lives in dangerouslySetInnerHTML, href values, and raw HTML sinks.

  3. Review in priority order, using references/checklist.md:

    1. Security
    2. Correctness and edge cases
    3. Performance
    4. Maintainability and conventions
SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/onewave-ai/claude-skills
Categories
Security, Git & Pull Requests, Code Review & Quality, Debugging

More from onewave-ai/claude-skills

All 108

Recommended

More Security
1semgrep avatarsemgrepsemgrep/skillsRun Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security vulnerabilities, write custom YAML 2.3Kskills.sh installs
2binance avatarderivatives-trading-usds-futuresbinance/binance-skills-hubBinance Derivatives-trading-usds-futures request using the Binance API. Authentication requires API key and secret key. Supports testnet and mainnet.2.3Kskills.sh installs
3tencentcloudbase avatarauth-wechat-miniprogramtencentcloudbase/skillsCloudBase WeChat Mini Program native authentication guide. This skill should be used when users need mini program identity handling, OPENID/UNIONID access, or `2.2Kskills.sh installs
4binance avatarassetsbinance/binance-skills-hubBinance Assets request using the Binance API. Authentication requires API key and secret key.2Kskills.sh installs
5k-dense-ai avatarlabarchive-integrationk-dense-ai/scientific-agent-skillsSecurely integrate with the official LabArchives ELN REST-like API and Inventory API v1. Use for regional endpoint selection, signed-request construction, user 2Kskills.sh installs
6binance avatarmargin-tradingbinance/binance-skills-hubBinance Margin-trading request using the Binance API. Authentication requires API key and secret key.1.9Kskills.sh installs