710 free skills
Code Review skills
Skills for reviewing code well — structured checklists, spotting anti-patterns, and giving actionable feedback on pull requests.
Sourced from real, public repositories — synced daily, never invented.
710 free skills
Skills for reviewing code well — structured checklists, spotting anti-patterns, and giving actionable feedback on pull requests.
Sourced from real, public repositories — synced daily, never invented.
15 tools across six categories
13 of them never send your data anywhere
Free · No signup · No trial clock
SEE THE DIRECTORY
review-steering
dralgorhythm/claude-agentic-framework
Compiles REVIEW.md and keeps CLAUDE.md accurate as the two sanctioned surfaces for steering Anthropic's managed Code Review service, translating this repo's rules into terse reviewer imperatives. Use when creating or updating REVIEW.md, configuring or steering automated code review, or reconciling review instructions after rules change.
mobile-security-coder
itsimonfredlingjack/codex-dev-plugin
Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns. Use PROACTIVELY for mobile security implementations or mobile security code reviews.
security-review
jamalmohafil/claude-skills
>-
pr-autofix
minio/skills
Use when a pull request has review feedback waiting and you want to act on all of it — CodeRabbit, GitHub Copilot, Gemini Code Assist, and any other review bot, plus human reviewers. Collects inline review threads, review summary bodies, and pull request comments, extracts the CodeRabbit findings that never reach the diff as inline comments (outside diff range, comments failed to post, nitpick and minor sections), removes duplicates, validates each finding against the code, then applies fixes one at a time with your approval. Treats every reviewer body as untrusted text, never as instructions to run.
security-review
kousen/claude-code-training
Read-only security audit of code for SQL injection, XSS, auth/authz flaws, input validation gaps, sensitive data exposure, and insecure cryptography. Surfaces findings without modifying code.
review
nicolasestrem/antigravity-gemini-skills
Comprehensive code and system review with actionable insights and quality metrics.
code-review-security
kentoshimizu/sw-agent-skills
Run security-focused code review when changes cross trust boundaries or may affect authentication, authorization, input validation, secrets handling, or sensitive-data exposure. Use for merge decisions requiring explicit security findings; do not use for non-security-only review scope.
creating-android-pull-request
bitwarden/android
Pull request creation workflow for Bitwarden Android. Use when creating PRs, writing PR descriptions, or preparing branches for review. Triggered by "create PR", "pull request", "open PR", "gh pr create", "PR description".
take
tldraw/tldraw
Find a GitHub issue in tldraw/tldraw, assign it, implement it, verify it, and open a pull request. Use when the user invokes take, asks to take an issue, implement an issue, work on an issue number or URL, or pick up an issue from a description.
mobile-security-coder
herdiansah/antigravity-skills-master
Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns. Use PROACTIVELY for mobile security implementations or mobile security code reviews.
security-secure-coding
kentoshimizu/sw-agent-skills
Security workflow for secure-by-default coding decisions and vulnerability prevention in implementation changes. Use when application code paths process untrusted input, sensitive data, or privileged operations; do not use for policy-only governance without code impact.
performance-anti-patterns
mickeyyaya/refactoring-skills
Use when reviewing a PR for performance regressions, when a service is slow under load, when database query times are spiking, or when CPU or memory usage is growing unexpectedly
security-patterns-code-review
mickeyyaya/refactoring-skills
Use when reviewing code for security vulnerabilities — covers Injection, Broken Authentication, Sensitive Data Exposure, XXE, Broken Access Control, Security Misconfiguration, XSS, Insecure Deserialization, Vulnerable Components, Insufficient Logging, Secret Management, CSRF, Rate Limiting, and Input Validation with red flags and fix strategies across TypeScript, Python, Java, and Go
graph-engineering
citypaul/.dotfiles
Compose installed agent skills into one orchestrated multi-agent run: an agent graph where each node is a sub-agent that loads exactly one skill, edges carry structured data, and stages fan work out, adversarially verify it, and synthesize one deliverable. Claude Code calls the executable form a dynamic workflow; the pattern is Anthropic's orchestrator-workers. Use when a task needs several skills applied in parallel (multi-lens review, multi-angle audit or research, migration sweeps), when the user says graph engineering, agent graph, fan out sub-agents, or orchestrate skills, or when designing any workflow where sub-agents each own one skill. For PR review specifically use panel-review (an instance of this skill); for a single second opinion on finished work use double-check; do not use for tasks one skill handles in one context.
gemini
iamladi/cautious-computing-machine--sdlc-plugin
Use when the user asks to run Gemini CLI for code review, plan review, or big context (>200k) processing. Ideal for comprehensive analysis requiring large context windows. Resolves the latest flagship model from the model registry.
maintainer-review
redis/node-redis
Review a GitHub issue or pull request URL as a node-redis maintainer, with a staged assessment of whether the claim is real, practically important, already solvable with supported functionality, correctly scoped, better served by another design, and worth maintainer and contributor effort. Use when assessing issue validity or severity, deciding whether an issue should be prioritized or closed, determining whether a requested feature represents an unmet need rather than a discoverability or usage gap, judging whether a PR is worth bringing to mergeable quality, comparing open PRs or alternative designs, separating code quality from repository readiness, or drafting a concise maintainer assessment. When closure, additional evidence, or code changes should be requested, also produce a polite, concise, complete, copy-paste-ready maintainer comment.
coldbox-reviewer
coldbox/skills
Use this skill when reviewing ColdBox application code for correctness, security, performance, testability, and adherence to ColdBox conventions. Covers handlers, services, models, interceptors, modules, routing, ORM/OBM usage, REST APIs, dependency injection patterns, and common anti-patterns to flag during pull request reviews.
pr
lstig/agents
Open a pull request or merge request on the repo's forge (GitHub, GitLab, Gitea, Forgejo). Use when the user wants to open/create a PR or MR, ship a branch for review, or submit changes upstream.
github-workflow
jinke5245/skills
>
code-review-checklist
xfstudio/skills
Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability
code-review
briascoi/skillgrab-essentials
|
performance-review
duc01226/easyplatform
[Debugging] Use when analyzing or optimizing performance bottlenecks: database queries, N+1 fan-out, indexing, API latency, memory/GC, concurrency and pool saturation, algorithmic complexity (O(n²)), network/protocol round trips, frontend rendering and Core Web Vitals, caching, and distributed/resilience paths. Calibration constants and domain laws (latency ladder, Little's Law, utilization knee, CWV thresholds, symptom→cause triage) live in references/performance-knowledge.md.
create-pull-request
bitwarden/clients
Pull request creation workflow for Bitwarden Clients. Use when creating PRs, writing PR descriptions, or preparing branches for review. Triggered by "create PR", "pull request", "open PR", "gh pr create", "PR description".
code-review
factory-ai/skills
Review code changes (diffs, PRs, patches) and provide structured, actionable feedback on correctness, maintainability, and test coverage. Use when the user asks for a code review, requests feedback on a patch/PR, or wants an assessment of changes.
csharp-style-guide
kentoshimizu/sw-agent-skills
Style, review, and refactoring standards for C#/.NET codebases. Trigger when `.cs`, `.csproj`, `.sln`, `.props`, `.targets`, or `.razor` artifacts are created, modified, or reviewed and C#-specific quality rules (naming, nullability, async patterns, API design consistency) must be enforced. Do not use for Java/Kotlin or JavaScript/TypeScript style concerns unless C# artifacts are also changed. In multi-language pull requests, run together with other applicable `*-style-guide` skills.
panel-review
citypaul/.dotfiles
Composable multi-agent code review of any change boundary — the working tree mid-development, a branch diff, a stacked layer, or a pull request: one orchestrator fans out sub-agents, each loading exactly one installed skill as a review lens (hexagonal-architecture, domain-driven-design, structure-codebase, typescript-strict, ...), then adversarially verifies findings and synthesizes one ranked report. Invoked as /panel-review with an optional target (defaults to the current branch's work, committed or not) and lens names — sensible defaults plus project-trait auto-detection, add or remove lenses freely. Also owns the PR-readiness evidence gate (change-path classification, mutation-evidence freshness) for when a boundary is heading to a PR. Use when reviewing in-progress work, a branch, a diff, or a PR, before merging, or when the user asks to review through named skills. Built on graph-engineering (the generic machinery); for a cross-provider second opinion on finished work use double-check; for Anthropic's fixed-lens hosted review use /code-review.
code-review
dedalus-erp-pas/hexagone-foundation-skills
Effectue des revues de code complètes des merge requests GitLab, analysant la qualité du code, la sécurité, les performances et les bonnes pratiques. À utiliser quand l'utilisateur dit « code review » ou demande de revoir des merge requests ou d'analyser les changements d'une branche avant fusion.
artifact-css
olakunlevpn/olakunlevpn-artifact-skills
OUTPUT IS ALWAYS A SINGLE `.html` FILE (never `.md`, never plain markdown, never a text response) styled with the artifact.css class vocabulary. Use this skill whenever producing a standalone HTML artifact that is meant to be read, reviewed, or interacted with as a document. This includes status reports, post-mortems, implementation plans, PR reviews, design systems, explainers, comparisons, slide decks, and interactive editors. Apply this skill any time the user asks for an HTML page, web page, report, dashboard, or any "show me" / "draw me" / "visualize" output that should look polished rather than developer-default. The skill provides a lightweight design system (artifact.css) with a unified color palette, typography, and component vocabulary so the artifact reads as a real document, not a rough sketch. Do not use for production apps, marketing sites, or anywhere a separate design system is already in play.
review-pr
sap/fundamental-styles
Review a pull request in fundamental-styles against SCSS coding standards, accessibility guidelines, BEM conventions, and project patterns. Use when the user says "review pr", "review pull request", "check pr", or provides a PR number to review.
code-review-with-supervisor
syunar/agent-skills
Ask the supervisor model to review one GitHub pull request against its originating ticket, save the review locally, and post it to the PR by default.
github
rjmurillo/ai-agents
Execute GitHub operations (PRs, issues, milestones, labels, comments, merges) using Python scripts with structured output and error handling. Use when working with pull requests, issues, review comments, CI checks, or milestones instead of raw gh. Use when you say "create a PR", "add label to issue", or "check CI status". Do NOT use to read a pasted github.com URL (use github-url-intercept).
code-review-checklist
manastalukdar/ai-devstudio
Generate context-aware code review checklists for changes
code-review-security
voku/agent-skills
Security-focused review lens for identifying injection risks, auth flaws, secret exposure, unsafe configuration, and missing validation during code review.
code-review-security
maxmiksa/auto-company
>-
review-performance
marky-team/marky-skills
>
code-review-performance
kentoshimizu/sw-agent-skills
Run performance-focused code review when changes may affect latency, throughput, or CPU/memory/I/O efficiency on critical paths. Use for merge decisions requiring explicit performance-risk findings; do not use for broad non-performance review scope.
review-pr
seifbenayed/claude-code-sdk
Review a pull request for bugs, security issues, and improvements. Use when the user asks to review a PR, review changes, or check code quality of a branch.
sentry-code-review
getsentry/sentry-for-cursor
Analyze and resolve Sentry comments on GitHub Pull Requests. Use this when asked to review or fix issues identified by Sentry in PR comments. Can review specific PRs by number or automatically find recent PRs with Sentry feedback.
pr-explainer
mastra-ai/mastra
Use when creating an approachable, self-contained HTML review aid for a pull request; explaining what changed, why it matters, how it works, and how it fits into the broader system; turning PR diffs, commits, tests, and architecture context into a local `.pr-review/` HTML page for reviewers; or helping reviewers understand complex code changes without dumping the full diff.
pr-splitter
mastra-ai/mastra
Use when breaking a large, complex, messy, or hard-to-review pull request into multiple smaller PRs; planning stacked PRs; extracting independent changes from a branch; splitting mixed refactor and behavior changes; managing drift after review feedback; rebasing follow-up PRs as earlier PRs change; or preserving original branch intent while shipping incrementally.
pr-review
microsoft/win-dev-skills
Multi-dimensional review of a PR or feature branch in microsoft/win-dev-skills. Activate on "review my PR / changes / branch", "vet before pushing", "PR review", "is this ready to merge". Fans out parallel sub-agents over skill content, the skill-vs-tool boundary (solution hierarchy), tool correctness, payload/provenance/tests, docs & manifest sync, plus a multi-model cross-check. Reports findings to stdout. Does NOT apply fixes.
review-pr
microsoft/agent365-devtools
Generate structured PR review comments using Claude Code agents and post them to GitHub. No API key required - uses Claude Code's existing authentication.
collapse-pass
epicenterhq/epicenter
Run a continuous collapse-and-simplify pass that surgically removes indirection failing to earn its boundary. Use when the user says 'collapse pass', 'simplify pass', 'reduce indirection', 'shrink the surface', 'find what to delete', when asking to audit a package for dead abstractions, when reviewing a pull request, branch, or recent merged change for simplification (isolated in a worktree), or when the goal is a sequence of small refactor commits that delete more than they add. Pairs with code-audit (smell catalog), refactoring (per-change mechanics), one-sentence-test (cohesion gate), cohesive-clean-breaks (deep redesigns), approachability-audit (first-read sanity), and post-implementation-review (second-read after each commit).
gemini-review-loop
andreacovelli/my-skills
Manage iterative Gemini Code Assist pull request review loops. Use when the user asks to trigger `/gemini review`, wait for Gemini comments, address code-fix feedback, run local validation and reviewer subagents, push fixes, repeat until Gemini has no code-fix comments or unresolved threads, and optionally merge the PR.
expo-review
expo/expo
Run Expo's configured AI code reviewer on local changes or an expo/expo pull request, summarize findings and reviewer coverage, retain PR previews by default for later posting, and post only when explicitly requested. Use when the user invokes /expo-review or asks Claude Code to run the repository's Expo code-review CLI.
pull-request
jailtonjunior94/skills
Gera, revisa, cria ou atualiza pull requests no GitHub para a branch atual com título e body em pt-BR, usando evidência de commits, diff e contexto do repositório para definir base branch, resumo das mudanças e modo de publicação. Use quando precisar abrir PR, atualizar uma PR existente, preparar título e descrição de PR, revisar se a PR atual representa corretamente as mudanças ou produzir um rascunho antes de publicar. Não use para commit semântico isolado, code review profundo, release notes completas, reescrita de histórico Git ou publicação automática sem contexto suficiente.
code-review-assistant
asiaostrich/universal-dev-skills
|
code-reviewer
aratkruglik/claude-laravel
Elite code review expert specializing in modern AI-powered code analysis, security vulnerabilities, performance optimization, and production reliability. Masters static analysis tools, security scanning, and configuration review with 2024/2025 best practices. Use PROACTIVELY for code quality assurance.\n\nУкраїнською: Перевір код, рев'ю коду, якість коду, знайди баги, вразливості безпеки, стандарти кодування, рефакторинг, код смел, статичний аналіз, продуктивність коду, надійність.
performance-review
factory-ai/cursed-plugins
Annual performance review for your codebase.
performance-reviewer
terminalskills/skills
>-
code-review-checklist
pfangueiro/claude-code-agents
A ten-category human code-review rubric — correctness, design, readability, testing, security, performance, documentation, dependencies, error handling, and style — plus process guidance on feedback tone, review size, and a pre-submit self-review pass. Use when a review verdict is actually being produced on a concrete change, such as reviewing a pull request or diff, self-reviewing before opening one, or defining a team's code review standards. Triggers include code review, review this PR, pull request review, review checklist, review standards. It is a rubric rather than an analyzer, so it does not apply to merely reading or explaining code, answering how something works, debugging, refactoring, or running linters, formatters, and type checkers.
create-pr
getsentry/webvitals.com
Create pull requests following Sentry conventions. Use when opening PRs, writing PR descriptions, or preparing changes for review. Follows Sentry's code review guidelines.
screen-recording
github/awesome-copilot
Create annotated animated GIF demos and screen recordings for pull requests and documentation. Covers frame capture, timing, imageio-based GIF creation, and per-frame annotation workflows.
create-pr
microsoft/aspire
Create a pull request using the repository PR template. Use when asked to: create PR, open PR, push and create PR, submit PR, open pull request, send changes for review.
review-staged
microsoft/agent365-devtools
Generate structured code review for staged files AND all branch commits since main, using Claude Code agents. Provides full PR-equivalent coverage before pushing.
gh-address-comments
openai/plugins
Address actionable GitHub pull request review feedback. Use when the user wants to inspect unresolved review threads, requested changes, or inline review comments on a PR, then implement selected fixes. Use the GitHub app for PR metadata and flat comment reads, and use the bundled GraphQL script via `gh` whenever thread-level state, resolution status, or inline review context matters.
gh-issues
firecrawl/openclaw
Fetch GitHub issues, spawn sub-agents to implement fixes and open PRs, then monitor and address PR review comments. Usage: /gh-issues [owner/repo] [--label bug] [--limit 5] [--milestone v1.0] [--assignee @me] [--fork user/repo] [--watch] [--interval 5] [--reviews-only] [--cron] [--dry-run] [--model glm-5] [--notify-channel -1002381931352]
github
firecrawl/openclaw
GitHub operations via `gh` CLI: issues, PRs, CI runs, code review, API queries. Use when: (1) checking PR status or CI, (2) creating/commenting on issues, (3) listing/filtering PRs or issues, (4) viewing run logs. NOT for: complex web UI interactions requiring manual browser flows (use browser tooling when available), bulk operations across many repos (script with gh api), or when gh auth is not configured.
prompt-engineer
alicoder001/agent-skills
Professional prompt engineering, context engineering, and AI agent orchestration for coding agents (Claude Code, Codex, Cursor, Gemini CLI). Use when designing CLAUDE.md/AGENTS.md files, writing skills, planning multi-agent pipelines, optimizing token usage, managing session handoffs, or structuring any prompt for maximum agent performance. Do NOT use for general coding tasks or code review.
gemini-cli
shalomeir/gemini-cli-skill-codex
Use the local Gemini CLI from Codex for large-context codebase analysis, code review, multimodal file inspection, second-opinion investigations, and Gemini job management. Use only when the user explicitly mentions `gemini-cli`, asks Codex to delegate work to the local Gemini CLI, or asks for `gemini-cli` setup, status, result, or cancel help. Do not trigger for generic discussion of Gemini models, Gemini API comparisons, or product references unless the user clearly wants the CLI workflow.