code-review-specialist · luongnv89 — Claude Code skill: what it does & setup
Evaluates code for security flaws, performance bottlenecks, and design issues. Useful when reviewing pull requests or planning refactoring.
npx skills add luongnv89/claude-howto --skill code-review-specialist -a claude-codeWhat code-review-specialist does
The skill inspects code across security, performance, design patterns, and maintainability. It flags injection risks and data exposure flaws. The review also evaluates algorithmic efficiency with Big O analysis and checks caching opportunities. Functions must stay under 50 lines. Anything longer automatically draws a warning.
The package bundles markdown templates and Python tools. The file templates/review-checklist.md standardizes the inspection process, while templates/finding-template.md formats issues with file locations, severity levels, and code fixes. To collect quantitative stats, scripts/analyze-metrics.py counts functions, classes, and average line lengths. A separate tool, scripts/compare-complexity.py, contrasts cyclomatic and cognitive complexity between two revisions. Running these metric tools requires a local Python interpreter.
The final output assigns an overall score from 1 to 5. The agent details urgent defects first, attaching exact line numbers and proposed patches, then breaks down secondary remarks by category.
What it helps with
- spot injection vulnerabilities and sensitive data exposure
- calculate Big O algorithmic efficiency and memory bottlenecks
- verify SOLID principles and structural design patterns
- compare cyclomatic and cognitive complexity before and after refactoring
- detect functions exceeding 50 lines of code
Example prompts for the agent
- Review src/auth.ts for security flaws and performance bottlenecks
- Analyze this pull request against templates/review-checklist.md
- Compare complexity between revisions using scripts/compare-complexity.py
How to install code-review-specialist
1Skills CLI (Vercel)
npx skills add luongnv89/claude-howto --skill code-review-specialist -a claude-code2Manually: put the files in place
~/.claude/skills/code-review-specialist/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/code-review-specialist/
1Skills CLI (Vercel)
npx skills add luongnv89/claude-howto --skill code-review-specialist -a codex2Manually: put the files in place
.agents/skills/code-review-specialist/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add luongnv89/claude-howto --skill code-review-specialist -a cursor2Manually: put the files in place
.cursor/skills/code-review-specialist/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install luongnv89/claude-howto code-review-specialist2Manually: put the files in place
.github/skills/code-review-specialist/SKILL.md1Skills CLI (Vercel)
npx skills add luongnv89/claude-howto --skill code-review-specialist -a gemini-cli2Platform CLI
gemini skills install https://github.com/luongnv89/claude-howto --path 03-skills/code-review-specialistManually: put the files in place
.devin/skills/code-review-specialist/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add luongnv89/claude-howto --skill code-review-specialist -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about code-review-specialist
How to install code-review-specialist in Claude Code?
Run npx skills add luongnv89/claude-howto --skill code-review-specialist -a claude-code. Alternatively, copy the skill configuration directly to ~/.claude/skills/code-review-specialist/SKILL.md.
What does the code-review-specialist skill do?
It inspects code against a checklist covering security, Big O efficiency, SOLID principles, and function lengths. The agent outputs a structured review with a quality score from 1 to 5 and ready-to-use code fixes.
What helper scripts are included with code-review-specialist?
The skill bundles scripts/analyze-metrics.py to calculate line metrics and complexity scores, plus scripts/compare-complexity.py to contrast revisions during refactoring. Both scripts require Python in your local environment.
Source text
SKILL.md · MIT
--- name: code-review-specialist description: Comprehensive code review with security, performance, and quality analysis. Use when users ask to review code, analyze code quality, evaluate pull requests, or mention code review, security analysis, or performance optimization. --- # Code Review Skill This skill provides comprehensive code review capabilities focusing on: 1. **Security Analysis** - Authentication/authorization issues - Data exposure risks - Injection vulnerabilities - Cryptographic weaknesses - Sensitive data logging 2. **Performance Review** - Algorithm efficiency (Big O analysis) - Memory optimization - Database query optimization - Caching opportunities - Concurrency issues 3. **Code Quality** - SOLID principles - Design patterns - Naming conventions - Documentation - Test coverage 4. **Maintainability** - Code readability - Function size (should be < 50 lines) - Cyclomatic complexity - Dependency management - Type safety ## Reference Files This skill includes supporting files that you should read when performing reviews: - **`templates/review-checklist.md`** — Structured checklist covering security, performance, quality, and testing. Read this file and use it as a guide to ensure no category is missed during review. - **`templates/finding-template.md`** — Standard template for documenting individual findings with severity, location, code examples, and impact analysis. Read this file and use its format when reporting issues. - **`scripts/analyze-metrics.py`** — Python script that calculates code metrics (function count, class count, average line length, complexity score). Run this on the file under review to gather quantitative data. - **`scripts/compare-complexity.py`** — Python script that compares cyclomatic and cognitive complexity between two versions of a file. Run this with the before and after versions when reviewing refactoring changes. ## Review Template For each piece of code reviewed, provide: ### Summary - Overall quality assessment (1-5) - Key findings count - Recommended priority areas ### Critical Issues (if any) - **Issue**: Clear description - **Location**: File and line number - **Impact**: Why this matters - **Severity**: Critical/High/Medium - **Fix**: Code example ### Findings by Category #### Security (if issues found) List security vulnerabilities with examples #### Performance (if issues found) List performance problems with complexity analysis #### Quality (if issues found) List code quality issues with refactoring suggestions #### Maintainability (if issues found) List maintainability problems with improvements ## Version History - v1.0.0 (2024-12-10): Initial release with security, performance, quality, and maintainability analysis --- **Last Updated**: August 4, 2026 **Claude Code Version**: 2.1.220 **Sources**: - https://code.claude.com/docs/en/skills **Compatible Models**: Claude Fable 5, Claude Opus 5, Claude Sonnet 5, Claude Sonnet 4.6, Claude Opus 4.8, Claude Haiku 4.5
© luongnv89 · MIT · luongnv89/claude-howto
Similar skills
All skills for Code review and refactoring →code-review-specialist by other authors comes first.