Code Reviewer

shubhamsaboo/awesome-llm-apps

A systematic code reviewer that prioritizes issues from critical security vulnerabilities down to maintainability concerns. It checks for SQL injection, XSS, N+1 queries, error handling gaps, and code quality problems in that order. The review output is well structured with severity labels, specific line numbers, and concrete fix examples. What's practical here is the tiered approach: security gets flagged as critical, performance as high priority, and things like naming conventions as medium. The rules are split across separate markdown files by category, and there's a compiled AGENTS.md if you want everything at once. Good for PR reviews where you need consistent coverage across security, performance, and quality without missing the critical stuff.

skills.sh installs

4.6K

GitHub stars

144.3K

last updated

Aug 21, 2026

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Recommended

More Security

1api-auth-and-jwt-abuseyaklang/hack-skillsAPI authentication and JWT abuse playbook. Use when testing bearer tokens, API keys, claim trust, header spoofing, rate limits, and API auth boundary weaknesses4Kskills.sh installs

2inngest-middlewareinngest/inngest-skillsUse when adding cross-cutting concerns to durable functions — structured logging or tracing across all functions, error tracking with Sentry, payload encryption3.8Kskills.sh installs

3dangling-markup-injectionyaklang/hack-skillsDangling markup injection playbook. Use when HTML injection is possible but JavaScript execution is blocked (CSP, sanitizer strips event handlers, WAF blocks sc3.8Kskills.sh installs

4type-jugglingyaklang/hack-skillsPHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature checks, or token validation uses loose equality, numeric coercion, 3.8Kskills.sh installs

5smart-contract-vulnerabilitiesyaklang/hack-skillsSmart contract vulnerability playbook. Use when auditing Solidity/EVM contracts for reentrancy, integer overflow, access control, delegatecall, flash loan, sign3.7Kskills.sh installs

6unauthorized-access-common-servicesyaklang/hack-skillsUnauthorized access playbook for common exposed services. Use when Redis, Rsync, PHP-FPM, AJP/Ghostcat, Hadoop YARN, H2 Console, or similar management interface3.6Kskills.sh installs