@michaelshimeles/code-review-analyzer
BA comprehensive code review skill that analyzes code for best practices, potential bugs, security issues, and suggests improvements.
Install
agr install @michaelshimeles/code-review-analyzer --target claudeWrites 2 files into .claude/skills/, pinned to git-d2f8089a.
- .claude/skills/code-review-analyzer/README.md
- .claude/skills/code-review-analyzer/SKILL.md
Document
name: Code Review Analyzer description: A comprehensive code review skill that analyzes code for best practices, potential bugs, security issues, and suggests improvements.
Code Review Analyzer
This skill performs thorough code reviews by analyzing your code for best practices, identifying potential bugs, security vulnerabilities, and suggesting improvements for better maintainability and performance.
When to Use
Use this skill when you need to:
- Review code before merging pull requests
- Analyze existing code for potential issues
- Get suggestions for code improvements
- Identify security vulnerabilities
- Ensure adherence to coding standards
- Optimize code performance
- Check for common anti-patterns
Simply paste your code and specify the programming language for a comprehensive review with actionable feedback.
Trustgrade B
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- passType matchnot applicable to this artifact type
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- warnLicenseno SPDX license detected
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-d2f8089aaa112026-07-30