Code Review

This is a structured code reviewer that checks diffs and files against a specific checklist: OWASP Top 10 vulnerabilities, error handling, complexity, naming conventions, and performance issues. It outputs findings in three severity tiers (critical, warning, suggestion) with line references and concrete fixes, which is helpful when you want consistent review criteria across PRs. The format is opinionated but clear, and it'll catch the obvious stuff like SQL injection or missing input validation. Good for teams that want a baseline check before human review, though it's only as thorough as Claude's analysis in the moment. Works on pull requests, merge requests, or any code diff you throw at it.

GitHub stars: 2.8K
last updated: May 28, 2026

View on GitHub

Install

$ npx -y skills add open-gitagent/opengap --skill code-review --agent claude-code

Installs into .claude/skills of the current project.

Files

Code Review

Instructions

When reviewing code:

Read the full diff or file provided
Check for security vulnerabilities (OWASP Top 10)
Evaluate error handling completeness
Assess code complexity and readability
Verify naming conventions and code style
Look for performance issues
Check for proper input validation

Output Format

## Review Summary
[1-2 sentence overview]

## Findings

### CRITICAL
- [Finding with line reference and fix]

### WARNING
- [Finding with line reference and fix]

### SUGGESTION
- [Finding with line reference and fix]

## What's Done Well
- [Positive observations]

Example Finding

### CRITICAL
- **Line 42**: SQL injection vulnerability — user input concatenated directly into query string.
  Fix: Use parameterized queries instead of string concatenation.
  ```python
  # Before (vulnerable)
  cursor.execute(f"SELECT * FROM users WHERE id = {user_id}")
  # After (safe)
  cursor.execute("SELECT * FROM users WHERE id = %s", (user_id,))

SKILL.md on GitHub