code-review
Officialcode review
What it does
- SQL injection, XSS, CSRF
- Authentication and authorization flaws
- Secrets or credentials in code
- Insecure deserialization
- Path traversal
- Unnecessary memory allocations
- Algorithmic complexity (O(n²) in hot paths)
Requirements & configuration
- If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md.
- [Approve / Request Changes / Needs Discussion]
Derived from the skill's own SKILL.md documentation · extracted 2026-07-23
code-review FAQ
What does the code-review skill do?
Review code changes for security, performance, and correctness. Trigger with a PR URL or diff, "review this before I merge", "is this code safe?", or when checking a change for N+1 queries, injection risks, missing edge cases, or error handling gaps. SQL injection, XSS, CSRF Authentication and authorization flaws
What does code-review require?
If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md. [Approve / Request Changes / Needs Discussion]
How do I install code-review?
Run: npx -y skills add https://github.com/anthropics/knowledge-work-plugins --skill code-review --agent claude-code — the source lives at github.com/anthropics/knowledge-work-plugins.
Maintain code-review?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[](https://getagentictools.com/skills/anthropics-knowledge-work-plugins-code-review?ref=badge) npx agentictools info skills/anthropics-knowledge-work-plugins-code-review The second line is the CLI lookup for this page — handy in READMEs and docs.