Code Review Checklist
Use when reviewing a pull request or code changes
Install
$ agentstack add skill-hubertlim-skillforge-code-review-checklist ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-hubertlim-skillforge-code-review-checklist) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Step 1: Understand Context
> Read the PR description and linked issues
- Understand what problem this change solves
- Check if the approach matches the agreed design
- Note the scope of changes
Step 2: Security Review
> Check for security vulnerabilities
- Look for injection vulnerabilities (SQL, XSS, command)
- Verify authentication and authorization checks
- Ensure no secrets or keys are hardcoded
- Validate all user inputs are sanitized
Step 3: Logic and Correctness
> Verify the code does what it claims
- Trace the happy path end to end
- Check edge cases and error handling
- Look for off-by-one errors and null checks
Step 4: Readability
> Ensure the code is maintainable
- Check naming clarity for variables and functions
- Verify comments explain why, not what
- Look for unnecessary complexity
Step 5: Test Coverage
> Validate test quality
- Check that new code has corresponding tests
- Verify edge cases are tested
- Ensure tests are deterministic
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: hubertlim
- Source: hubertlim/SkillForge
- License: MIT
- Homepage: https://hubertlim.github.io/SkillForge/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.