sanyuan0704 avatar

Code Review Expert

This is a structured code review workflow that runs against your current git diff and flags issues by severity (P0 critical down to P3 style nits). It checks for SOLID violations, security risks like injection or auth gaps, race conditions, and removal candidates, then asks how you want to proceed before touching anything. The review-first approach is solid since you get findings organized by priority with inline comments before committing to fixes. Most useful when you want a senior engineer perspective on a pull request without the back and forth, though the depth of analysis depends on how well it can pattern match against the bundled checklists for security, code quality, and architecture smells.

install copies · 90 days. Times the install command was copied on this site in the last 90 days, bots filtered.
5
skills.sh installs
13.8K
GitHub stars
4K
last updated
Aug 21, 2026

Install

$ npx -y skills add sanyuan0704/sanyuan-skills --skill code-review-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

Code Review Expert

Overview

Perform a structured review of the current git changes with focus on SOLID, architecture, removal candidates, and security risks. Default to review-only output unless the user asks to implement changes.

Severity Levels

LevelNameDescriptionAction
P0CriticalSecurity vulnerability, data loss risk, correctness bugMust block merge
P1HighLogic error, significant SOLID violation, performance regressionShould fix before merge
P2MediumCode smell, maintainability concern, minor SOLID violationFix in this PR or create follow-up
P3LowStyle, naming, minor suggestionOptional improvement

Workflow

1) Preflight context

  • Use git status -sb, git diff --stat, and git diff to scope changes.
  • If needed, use rg or grep to find related modules, usages, and contracts.
  • Identify entry points, ownership boundaries, and critical paths (auth, payments, data writes, network).

Sponsors

Details

Repository
github.com/sanyuan0704/sanyuan-skills
Categories
Security, Git & Pull Requests, Code Review & Quality
First seen
May 16, 2026

More from sanyuan0704/sanyuan-skills

All 6

Recommended

More Security
1wshobson avatarsecrets-managementwshobson/agentsImplement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials,13.6Kskills.sh installs
2github avatarpostgresql-code-reviewgithub/awesome-copilotPostgreSQL-specific code review assistant focusing on PostgreSQL best practices, anti-patterns, and unique quality standards. Covers JSONB operations, array usa12.8Kskills.sh installs
3pluginagentmarketplace avatarjava-spring-bootpluginagentmarketplace/custom-plugin-javaBuild production Spring Boot applications - REST APIs, Security, Data, Actuator11.8Kskills.sh installs
4binance avatarquery-token-auditbinance/binance-skills-hubQuery token security audit to detect scams, honeypots, and malicious contracts before trading. Returns comprehensive security analysis including contract risks,11.8Kskills.sh installs
5wshobson avataranti-reversing-techniqueswshobson/agentsUnderstand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use this skill when analyzing malware evasion techniques11.3Kskills.sh installs
6wshobson avatarpci-compliancewshobson/agentsImplement PCI DSS compliance requirements for secure handling of payment card data and payment systems. Use when securing payment processing, achieving PCI comp10.9Kskills.sh installs