710 free skills

Code Review skills

Skills for reviewing code well — structured checklists, spotting anti-patterns, and giving actionable feedback on pull requests.

Sourced from real, public repositories — synced daily, never invented.

clean-architecture-review

noorkhalel/saas-ai-skills

Audit the current architecture of an existing repository or deployed system: boundaries, dependency direction, module responsibilities, coupling, testability, and incremental modernization. Use for Clean/Hexagonal/DDD/layering health checks. Do not use for greenfield architecture design or a narrow code/PR review.

review-pr

fradser/skills

Reviews a pull request: runs its own baseline review of the PR diff, then a persistent watch polls CI and incoming reviewer comments via a script, triages each comment through an independent skeptical agent, applies only verified fixes, and commits+pushes via inline git commands until CI passes and no comments remain to adopt — then runs the closeout ceremony and auto-merges. Fully automatic, no user questions. Use this skill when the user asks to "review a PR", "monitor PR review comments", "address reviewer feedback on #123", or "watch CI on a pull request".

code-review-checklist

benjaminastera/antigravity-awesome-skills

Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability

code-review

niparis/agent-skills

Perform thorough code reviews using project-specific guidelines and checklists

code-review-performance

voku/agent-skills

Performance-focused review lens for identifying inefficiencies, high-cost query shapes, resource waste, and worst-case scalability issues during code review.

remotion-dev/remotion

Open a pull request for the current feature

pr-screenshots

github/awesome-copilot

Embed before/after screenshots and annotated images in pull request descriptions. Covers PR description patterns, image upload for Azure DevOps and GitHub, and sizing best practices.

pr-review-comments

microsoft/semantic-link-labs

Guide for submitting/posting inline PR review comments to GitHub. Use this when you need to post code review comments on specific lines of a Pull Request.

review

microsoft/fluidframework

Use when asked to review code, review a branch, or do a code review. Spawns Breaker (correctness) and API Analyst (compatibility/conventions) sub-agents while the orchestrator reviews architecture, tests, performance, and security.

performing-multi-agent-code-review

bitwarden/ai-plugins

Perform a rigorous, multi-agent code review with architecture-compliance, parallel quality/security analysis, finding validation, and severity audit. Use when the user asks for a structured, deep, thorough, multi-pass, or multi-agent code review — or a review that includes architecture/pattern compliance, confidence-scored findings, or a severity audit. Use when the user asks for a code review across a commit range, time window, or N most recent commits in a locally checked-out repo.

watch-pr

huggingface/openenv

Monitor a PR's CI checks and Greptile code review after submission. Polls CI status, auto-fixes failures via ralph-loop, waits for Greptile review, addresses comments, and iterates until green.

github

openai/plugins

Triage and orient GitHub repository, pull request, and issue work through the connected GitHub app. Use when the user asks for general GitHub help, wants PR or issue summaries, or needs repository context before choosing a more specific GitHub workflow.

commit-security-scan

factory-ai/skills

Analyze code changes for security vulnerabilities using LLM reasoning and threat model patterns. Use for PR reviews, pre-commit checks, or branch comparisons.

security-review

factory-ai/skills

Scan code changes for security vulnerabilities using STRIDE threat modeling, validate findings for exploitability, and output structured results for downstream patch generation. Supports PR review, scheduled scans, and full repository audits.

code-review

flutter/skills

Performs a comprehensive, multi-step code review of pull requests or local code changes, using iterative refinement (generation, critique, synthesis) to ensure high-quality, actionable feedback. Use when you need to review code changes thoroughly.

rdd-advisory-transport

gentleman-programming/gentle-ai

Trigger: reviewer transport, advisory transport, review adapter, lens prompt/schema, OpenCode reviewer plugin, Codex reviewer, ReviewProviderContract. Enforce the shared Go advisory reviewer transport contract.

rust-coding-guidelines

pedronauck/skills

Use when asking about Rust code style or best practices. Keywords: naming, formatting, comment, clippy, rustfmt, lint, code style, best practice, P.NAM, G.FMT, code review, naming convention, variable naming, function naming, type naming, 命名规范, 代码风格, 格式化, 最佳实践, 代码审查, 怎么命名

code-review

clickhouse/clickhouse-java

Review changes in clickhouse-java for correctness, compatibility, API stability, and missing tests. Use when reviewing pull requests, commits, diffs, patches, or when the user asks for a code review.

scala-code-quality

majk-p/scala-skills

Use this skill when improving code quality, formatting, linting, or refactoring Scala code. This includes using scalafmt for code formatting, scalafix for refactoring and linting, bloop for fast compilation, metals for IDE features, and codebrag for automated code reviews. Trigger when the user mentions code formatting, linting, refactoring, code quality, or needs to improve codebase.

review-pull-request

patebry/skills

Review a GitHub pull request or code diff for actionable correctness, security, data-integrity, lifecycle, contract, architecture, and test defects, then publish one terse final review when permitted. Use for PR review, audit, judgment, or assessment; request changes only for proven merge blockers, distinguish defects from verification gaps, use comment-only reviews for self-authored PRs, and do not publish clean results.

review-pr

tomzx/dot-claude

Conduct the code-craft review of a GitHub pull request (quality, architecture, security, tests, operational concerns). Static only: does not build or run the code (verify-pr's conformance role) or judge whether the target is the right product (validate-pr's validation role).

pr-suggest-changes

gerardthehuman/skills

Publish finalized code review findings to an existing GitHub pull request as a clean pull request review with inline comments and suggested changes. Use when the user asks to submit, publish, post, or suggest review changes on an existing PR after findings are already known or while converting review feedback into GitHub review comments.

code-review-checklist

claudiodearaujo/izacenter

Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability

code-review

tiyee/agent-skills

Review working-tree, staged, commit, branch, or file-scoped code changes for actionable correctness, security, reliability, and maintainability defects. Use for review, audit, or pre-merge feedback; report findings before making fixes.

codereview-security

xinbenlv/codereview-skills

Zero-trust security analysis like Cursor BugBot. Focuses exclusively on finding exploitable vulnerabilities with high confidence (>95%). Use when reviewing files that handle input parsing, database queries, authentication, or external API calls.

code-reviewer

benjaminastera/antigravity-awesome-skills

Elite code review expert specializing in modern AI-powered code

code-reviewer

jiho00seo-dev/antigravity-awsome-skill

Elite code review expert specializing in modern AI-powered code

codereview-performance

xinbenlv/codereview-skills

Performance and scalability analysis specialist. Identifies algorithmic inefficiencies, N+1 queries, memory leaks, and concurrency issues. Use when reviewing loops, database queries, file I/O, or high-concurrency code.

performance-review

pokanop/ai

Perform a measurement-driven performance review of an application and produce a prioritized, severity-tiered findings report. Use when the user asks for a "performance review", "performance audit", says "why is it slow", "the app feels slow", "find bottlenecks", "optimize performance", "is it fast enough to launch", or wants a dedicated performance pass before shipping or after users report sluggishness. Establishes a baseline with real measurements, then sweeps six dimensions (data access and queries, network and payloads, rendering and responsiveness, memory and resources, concurrency and async, scalability posture). Complements code-review's per-change performance check with a standalone whole-system pass, and can emit a PRD-compatible report that feeds design-to-tasks.

performance-review

yldgio/vibe-grimoire

code-reviewer

sydonayrex/tldr

Code Review Checklist

notysoty/openagentskills

Runs a systematic checklist review on any code diff or file, covering correctness, security, performance, and readability.

security-review

camilooscargbaptista/cto-toolkit

**Security Code Review**: Reviews code for security vulnerabilities including authentication (OAuth2, JWT), authorization (RBAC, roles), API security, data protection, payment security, and common attack vectors. Use whenever the user wants a security review, penetration test analysis, threat model, or mentions OAuth2, JWT, authentication, authorization, RBAC, roles, permissions, CORS, CSRF, XSS, SQL injection, secrets management, encryption, PCI, or asks about securing their application. Also trigger when reviewing payment flows, financial transactions, or handling sensitive user data.

code-review

camilooscargbaptista/cto-toolkit

**Code Review Router & General Analysis**: Acts as the primary entry point for all code review requests. Detects the technology context and delegates to the appropriate specialized review skill (backend-review for Node/Java/NestJS, frontend-review for Angular/React, flutter-review for Dart/Flutter, security-review for auth/security concerns, ux-review for UI/UX). For mixed or ambiguous codebases, performs a comprehensive general review covering architecture, security, performance, and maintainability. Use whenever the user says 'review this code', 'check this PR', 'look at my code', 'code review', 'review my changes', shares a diff or code snippet, or pastes code wanting feedback.

django-perf-review

getsentry/dotagents

Django performance code review. Use when asked to "review Django performance", "find N+1 queries", "optimize Django", "check queryset performance", "database performance", "Django ORM issues", or audit Django code for performance problems.

security-review

getsentry/dotagents

Security code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP review", or review code for injection, XSS, authentication, authorization, cryptography issues. Provides systematic review with confidence-based reporting.

create-pr

getsentry/dotagents

ALWAYS use this skill when creating pull requests — never create a PR directly without it. Follows Sentry conventions for PR titles, descriptions, and issue references. Trigger on any create PR, open PR, submit PR, make PR, push and create PR, or prepare changes for review task.

pr-review

microsoft/winappcli

Multi-dimensional review of a PR or feature branch in the microsoft/winappcli repo. Activate when a contributor asks to "review my PR", "review my changes", "vet my branch before pushing", "do a full review", "PR review", "review this feature", or similar. Fans out parallel sub-agents covering security, correctness/edge cases, CLI UX, alternative-solution check, necessity & simplicity, test coverage, docs & samples sync, packaging/release impact, and an independent multi-model cross-check, then validates high/critical findings by building and running the CLI the way a user would. Reports a consolidated finding list to stdout. Does NOT apply fixes unless explicitly asked.

code-review

microsoft/aspire

Review a GitHub pull request for problems. Use when asked to review a PR, do a code review, check a PR for issues, or review pull request changes. Focuses only on identifying problems — not style nits or praise.

fluid-pr

microsoft/fluidframework

Use when creating a pull request in the Fluid Framework repo. Composes a PR title and body following Fluid Framework conventions, proposes them to the user, then pushes the branch and creates the PR on GitHub. Triggers on "create a PR", "make a PR", "open a PR", "submit a PR", or "push and create a PR".

code-explainer

microsoft/waza

Explains code snippets in plain English, breaking down what the code does step by step. Perfect for learning, code reviews, or documentation.

code-review

microsoft/synapseml

Review SynapseML Python and Scala code changes. Use before finalizing PR reviews or implementation changes to check security, compatibility, style, generated code, and targeted tests.

pre-submit-pr

huggingface/openenv

Validate changes before submitting a pull request. Run comprehensive checks including lint, tests, alignment review, and RFC analysis. Use before creating a PR, when asked if code is ready for review, or before pushing for PR.

brave/brave-core

Create a pull request for the current branch using `gh`.

code-review

coderabbitai/codex-plugin

Reviews code changes using CodeRabbit AI. Use when user asks for code review, PR feedback, code quality checks, security issues, or requests fix-review cycles.

security-threat-model

firecrawl/openai-skills

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.

yeet

firecrawl/openai-skills

Use only when the user explicitly asks to stage, commit, push, and open a GitHub pull request in one flow using the GitHub CLI (`gh`).

commit-push-pr

meleantonio/chernycode

Commit changes, push to remote, and create a pull request. Use for completing features or fixes ready for review.

github-workflows

community-access/accessibility-agents

GitHub workflow accessibility router for PR review, issues, Actions, releases, projects, security alerts, notifications, repository management, and accessible contributor workflows.

gdpr-compliant

marielynneblock/arcanum-artifex

Apply GDPR-compliant engineering practices across your codebase. Use this skill whenever you are designing APIs, writing data models, building authentication flows, implementing logging, handling user data, writing retention/deletion jobs, designing cloud infrastructure, or reviewing pull requests for privacy compliance. Trigger this skill for any task involving personal data, user accounts, cookies, analytics, emails, audit logs, encryption, pseudonymization, anonymization, data exports, breach response, CI/CD pipelines that process real data, or any question framed as "is this GDPR-compliant?". Inspired by CNIL developer guidance and GDPR Articles 5, 25, 32, 33, 35.

pr-review-canvas

gregm1991/skills

Generate an interactive PR review walkthrough as an HTML page. Fetches PR data via gh API, categorizes files into core vs mechanical changes, adds reviewer annotations, and renders diffs with moved-code detection. Use when the user pastes a GitHub PR URL and asks for a review, walkthrough, or summary, or says "review this PR".

review-pr

denoland/deno

Review a Deno runtime pull request for correctness, tests, security, and conventions. Use when asked to review a PR or when a PR number/URL is provided for review.

pr-review-canvas

poteto/plugins

pr-review-canvas

shaneholloman/cursor-plugins

gemini

dannykkh/skill-olympus

Use when the user asks to run Gemini CLI for code review, plan review, or big context (>200k) processing. Ideal for comprehensive analysis requiring large context windows. Uses Gemini 3.1 Pro Preview by default for state-of-the-art reasoning and coding.

gemini

lewbei/pro-agent-skills

Use when the user asks to run Gemini CLI for code review, plan review, or big context (>200k) processing. Ideal for comprehensive analysis requiring large context windows. Uses Gemini 3 Pro by default for state-of-the-art reasoning and coding.

kotlin-convention

javiercamarenatriguero/android-skills

Writes idiomatic, clean Kotlin following Android conventions. Use when user asks for "Kotlin code review", "is this idiomatic Kotlin", "Kotlin style check", "how to write this in Kotlin", or to "follow Kotlin best practices".

generate-explainer-yaml

hirokita117/yaml-to-html-skill

analyze a document, repository summary, pull request, README, design note, or specification and produce (or refine) the intermediate yaml files that drive the explainer pipeline — core.yaml (the semantic structure / meaning), view.yaml (the presentation strategy for a particular reader), and, by default, quiz.yaml (comprehension-check questions derived from core.yaml; skipped only when the user explicitly declines a quiz). use when the user wants to capture what a target means and how to show it before generating an html explainer, or wants to edit/reshape an existing core.yaml / view.yaml / quiz.yaml. the generate-explainer-html skill then turns these yaml files into a switchable, light/dark html bundle.

fp-go-pr-review

ibm/fp-go

Use this skill when reviewing pull requests for fp-go code (github.com/IBM/fp-go/v2). Trigger on mentions of PR review, code review, pull request validation, fp-go best practices validation, functional programming review, or when the user asks to review changes on a PR branch. This skill validates that changes follow fp-go conventions including data-last composition, point-free style, proper monad usage, lens patterns, and idiomatic functional patterns.

code-review

vilnacrm-org/user-service

Systematically retrieve and address PR code review comments using make pr-comments. Use when handling code review feedback or addressing PR comments.

Other skill categories

Testing — Unit, integration, e2e, and property-based testing skills.Debugging — Root-causing bugs, reading stack traces, bisecting regressions.Git Workflows — Branching strategy, commit hygiene, rebase, and merge conflicts.All skills

Code Review skills

Other skill categories

Check your AI visibility

Browse all the tools