C✳CODEZ.WIN
🌐 English

Localized reading guide

code-reviewPurpose, usage and source

Review code changes for security, performance, and correctness. Trigger with a PR URL or diff, "review this before I merge", "is this code safe?", or when checking a change for N+1 queries, injection risks, missing edge cases, or error handling gaps.

Source retrieved:

Source repository
anthropics/knowledge-work-plugins
SKILL.md
engineering/skills/code-review/SKILL.md
Repository stars
34,049
Repository updated
2026-10-30
Categories
Development
Last collected

License: Apache-2.0

Workflow excerpts are reading aids, not executable instructions from Codez. No third-party Skill was run to produce this page.

The purpose and workflow passages below are upstream material, organized and translated for reading. They are distinct from the separately labeled Codez editorial analysis.

What this Skill does

Review code changes for security, performance, and correctness. Trigger with a PR URL or diff, "review this before I merge", "is this code safe?", or when checking a change for N+1 queries, injection risks, missing edge cases, or error handling gaps.

How the upstream workflow works

Usage

Review the provided code changes: @$1 If no specific file or URL is provided, ask what to review.

Upstream passage · L13 ↗

/code-review

> If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md. Review code changes with a structured lens on security, performance, correctness, and maintainability.

Upstream passage · L7 ↗

Performance

Unnecessary memory allocations Algorithmic complexity (O(n²) in hot paths)

Upstream passage · L54 ↗
Upstream passage · ↗
/code-review <PR URL or file path>

Requirements and setup

No short requirements passage was selected from this file. This does not mean the Skill has no dependencies. Check the repository setup instructions and referenced files.

Limits and quality checks

Security

SQL injection, XSS, CSRF Authentication and authorization flaws

Upstream passage · L46 ↗

Start with a safe trial

  1. Check the supported host and the repository installation instructions. Keep the Skill directory and its referenced scripts, assets and documentation together; SKILL.md alone may omit dependencies.
  2. Give the agent your real input, desired output and acceptance criteria. Invocation syntax and available tools depend on the host; this site does not assume a universal install command.
  3. Try the source workflow in a disposable project or on a copy. Review operations that change files, remote services or billable resources before allowing them.
  4. Validate the output against the source quality checks and your own requirements. A successful trigger or a high repository Star count does not establish a correct result.

Skill format and directory specification ↗

Read further in the source

Translation and scope

This reading guide selects passages from the pinned upstream SKILL.md. Translation is assisted. It is not a complete manual or a claim of tested compatibility. Read the original and its referenced files before use.

This introduction refers to the pinned version below; current repository activity and collection time are shown separately.

Source retrieved
Source commit
2574e29377c7173d0cecffef29a6ecbd7f8ccb5d
Source SHA-256
6303932f1b301c614a6f5a0099cd87a19e1cd1b7cbfa1a1e11e996edbca6426b
Back to the full Skill catalog