---
name: Code Review
slug: code-review-10
category: Quality
description: Code Review reviews code diffs and files for security vulnerabilities (OWASP Top 10), error handling, complexity, naming conventions, and performance issues. Use when you need to review a PR, pull request, diff, merge request, or code changes.
github: "https://github.com/open-gitagent/opengap/tree/main/examples/standard/skills/code-review"
language: TypeScript
stars: 2916
forks: 346
install: "npx degit https://github.com/open-gitagent/opengap/tree/main/examples/standard/skills/code-review ~/.claude/skills/code-review"
installs_to: ~/.claude/skills/code-review
source_path: examples/standard/skills/code-review/SKILL.md
collection_size: 18
category_size: 1354
collection_url: "https://dirskills.com/collections/open-gitagent/opengap"
added: 2026-08-17T07:10:06.742Z
last_synced: 2026-08-17T07:10:06.742Z
canonical_url: "https://dirskills.com/skills/code-review-10"
---

# Code Review

Code Review reviews code diffs and files for security vulnerabilities (OWASP Top 10), error handling, complexity, naming conventions, and performance issues. Use when you need to review a PR, pull request, diff, merge request, or code changes.

**Install:**

```bash
npx degit https://github.com/open-gitagent/opengap/tree/main/examples/standard/skills/code-review ~/.claude/skills/code-review
```

## README

# Code Review

## Instructions
When reviewing code:
1. Read the full diff or file provided
2. Check for security vulnerabilities (OWASP Top 10)
3. Evaluate error handling completeness
4. Assess code complexity and readability
5. Verify naming conventions and code style
6. Look for performance issues
7. Check for proper input validation

## Output Format
```
## Review Summary
[1-2 sentence overview]

## Findings

### CRITICAL
- [Finding with line reference and fix]

### WARNING
- [Finding with line reference and fix]

### SUGGESTION
- [Finding with line reference and fix]

## What's Done Well
- [Positive observations]
```

### Example Finding

```
### CRITICAL
- **Line 42**: SQL injection vulnerability — user input concatenated directly into query string.
  Fix: Use parameterized queries instead of string concatenation.
  ```python
  # Before (vulnerable)
  cursor.execute(f"SELECT * FROM users WHERE id = {user_id}")
  # After (safe)
  cursor.execute("SELECT * FROM users WHERE id = %s", (user_id,))
  ```
```