# Code Reviewer

> >-

- **Type:** Skill
- **Install:** `agentstack add skill-sourav15mukherjee-skillforge-free-skills-code-reviewer`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [sourav15mukherjee](https://agentstack.voostack.com/s/sourav15mukherjee)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [sourav15mukherjee](https://github.com/sourav15mukherjee)
- **Source:** https://github.com/sourav15mukherjee/skillforge-free-skills/tree/main/code-reviewer

## Install

```sh
agentstack add skill-sourav15mukherjee-skillforge-free-skills-code-reviewer
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

## Code Reviewer

Perform thorough, multi-pass code reviews that catch bugs, security issues, and quality problems.

## Workflow

1. **Read the target code**
   Read all files the user wants reviewed. If they say "review my changes," run `git diff` to see what changed.

2. **Pass 1 — Correctness**
   Look for:
   - Logic errors and off-by-one bugs
   - Null/undefined reference risks
   - Unhandled promise rejections or missing error handling
   - Race conditions in async code
   - Missing input validation

3. **Pass 2 — Security**
   Check for OWASP Top 10:
   - SQL injection (string concatenation in queries)
   - XSS (unescaped user input in HTML)
   - Command injection (user input in shell commands)
   - Sensitive data exposure (API keys, passwords in code)
   - Missing authentication/authorization checks
   - Insecure deserialization

4. **Pass 3 — Performance**
   Look for:
   - N+1 query patterns
   - Unnecessary re-renders (React)
   - Missing pagination for large datasets
   - Synchronous operations that should be async
   - Memory leaks (event listeners, intervals not cleaned up)

5. **Pass 4 — Quality**
   Check for:
   - Dead code or unused imports
   - Overly complex functions (should be split)
   - Missing error boundaries
   - Inconsistent naming conventions
   - Magic numbers without constants

6. **Generate the review**
   Format findings by severity:

   **🔴 Critical** — Must fix before merging (bugs, security)
   **🟡 Warning** — Should fix, risk of issues (performance, quality)
   **🔵 Suggestion** — Nice to have (style, readability)

## Rules

- Always provide specific line references
- Include a suggested fix for every finding
- Be constructive — explain WHY something is an issue
- Don't nitpick formatting if the project has no linter
- Acknowledge good patterns you see — reviews shouldn't only be negative
- Summarize with a confidence rating: "Safe to merge" / "Needs changes" / "Needs rework"

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [sourav15mukherjee](https://github.com/sourav15mukherjee)
- **Source:** [sourav15mukherjee/skillforge-free-skills](https://github.com/sourav15mukherjee/skillforge-free-skills)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-sourav15mukherjee-skillforge-free-skills-code-reviewer
- Seller: https://agentstack.voostack.com/s/sourav15mukherjee
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.