# Code Review

> Reviews code diffs and files for security vulnerabilities (OWASP Top 10), error handling, complexity, naming conventions, and performance issues. Use when the user asks to review a PR, pull request, diff, merge request, or code changes.

- **Type:** Skill
- **Install:** `agentstack add skill-open-gitagent-opengap-code-review`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [open-gitagent](https://agentstack.voostack.com/s/open-gitagent)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [open-gitagent](https://github.com/open-gitagent)
- **Source:** https://github.com/open-gitagent/opengap/tree/main/examples/standard/skills/code-review
- **Website:** https://gitagent.sh

## Install

```sh
agentstack add skill-open-gitagent-opengap-code-review
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Code Review

## Instructions
When reviewing code:
1. Read the full diff or file provided
2. Check for security vulnerabilities (OWASP Top 10)
3. Evaluate error handling completeness
4. Assess code complexity and readability
5. Verify naming conventions and code style
6. Look for performance issues
7. Check for proper input validation

## Output Format
```
## Review Summary
[1-2 sentence overview]

## Findings

### CRITICAL
- [Finding with line reference and fix]

### WARNING
- [Finding with line reference and fix]

### SUGGESTION
- [Finding with line reference and fix]

## What's Done Well
- [Positive observations]
```

### Example Finding

```
### CRITICAL
- **Line 42**: SQL injection vulnerability — user input concatenated directly into query string.
  Fix: Use parameterized queries instead of string concatenation.
  ```python
  # Before (vulnerable)
  cursor.execute(f"SELECT * FROM users WHERE id = {user_id}")
  # After (safe)
  cursor.execute("SELECT * FROM users WHERE id = %s", (user_id,))
  ```
```

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [open-gitagent](https://github.com/open-gitagent)
- **Source:** [open-gitagent/opengap](https://github.com/open-gitagent/opengap)
- **License:** MIT
- **Homepage:** https://gitagent.sh

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-open-gitagent-opengap-code-review
- Seller: https://agentstack.voostack.com/s/open-gitagent
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.