# code-review-checklist

A skill that walks a reviewer through context, functionality, quality, security, performance and tests. Useful on pull requests and audits.

- skill · `type=skill` · Claude Code · 365 installs
- Author: davila7
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/development/code-review-checklist
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/skills/code-review-checklist

## What it does

The skill splits a review into six steps. First comes context: what problem the code solves, what the requirements are, which files changed and why. Then functionality, code quality, security, performance and tests, each with its own set of questions so nothing slips through.

Inside are markdown checklists for functionality, security and code quality. Every item comes with a bad-and-good JavaScript pair: missing validation next to email and password-length checks, a concatenated SQL string next to a parameterized query, a hardcoded key next to an environment variable. One example shows a function doing too much, followed by the same logic split into separate calls.

The security checklist names what to look for: input validation, SQL injection and XSS, CSRF, password hashing, token expiry, vulnerable dependencies. That makes the skill worth adding where user input and secrets reach the repository — on a prototype with no external data it adds little.

## Install

### Claude Code (native platform)

1. **claude-code-templates**
```bash
npx claude-code-templates@latest --skill development/code-review-checklist
```

2. **Skills CLI (Vercel)**
```bash
npx skills add davila7/claude-code-templates --skill code-review-checklist -a claude-code
```

3. **Manually: put the files in place**
- File: `~/.claude/skills/code-review-checklist/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/code-review-checklist/

### Codex

**Manually: put the files in place**
- File: `.agents/skills/code-review-checklist/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

**Manually: put the files in place**
- File: `.cursor/skills/code-review-checklist/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install davila7/claude-code-templates code-review-checklist
```

2. **Manually: put the files in place**
- File: `.github/skills/code-review-checklist/SKILL.md`

### Gemini CLI

**Platform CLI**
```bash
gemini skills install https://github.com/davila7/claude-code-templates --path cli-tool/components/skills/development/code-review-checklist
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/code-review-checklist/SKILL.md` — The legacy .windsurf/skills/ path still works

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/development/code-review-checklist

## When to use it
- walk a pull request through every review step
- catch SQL injection and a hardcoded key before merge
- check that new code has tests and edge cases covered
- set one review standard for a team
- show a newcomer what to look for in someone else's code

## Example prompts
- review this pull request with the code-review-checklist skill
- go through the changes in `src/api/users.js` and flag security issues
- review this module: functionality, quality, tests

## Similar
- [code-review-excellence](https://affpapa.org/en/nevibecode/skills/code-review-excellence.md) — skill · 30193 installs
- [code-review-analysis](https://affpapa.org/en/nevibecode/skills/code-review-analysis.md) — skill · 2400 installs
- [requesting-code-review](https://affpapa.org/en/nevibecode/skills/hermes-agent-adapted-from-obra-requesting-code-review.md) — skill · 469 installs
- [design-qa-checklist](https://affpapa.org/en/nevibecode/skills/design-qa-checklist.md) — skill · 2200 installs
- [review-team](https://affpapa.org/en/nevibecode/skills/review-team.md) — skill · 3300 installs
- [review-swarm](https://affpapa.org/en/nevibecode/skills/review-swarm.md) — skill · 756 installs

From the same set: [davila7/claude-code-templates](https://affpapa.org/en/nevibecode/by/davila7/claude-code-templates.md) — 224 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md