ihj04982/code-review
skills/code-review/SKILL.md
Comprehensive security and quality review of uncommitted changes. Invokes code-reviewer agent. Use when reviewing PRs, before committing, or when the user asks for a code review.
development
Updated Apr 5, 2026
$ install --global
skillsauthnpx skillsauth add ihj04982/my-cursor-settings code-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 5, 2026, 8:22 PM5.9s1 file scanned
SKILL.md
- name:
- code-review
- description:
- Comprehensive security and quality review of uncommitted changes. Invokes code-reviewer agent. Use when reviewing PRs, before committing, or when the user asks for a code review.
- disable-model-invocation:
- true
Code Review Command
This command invokes the code-reviewer agent to perform comprehensive security and quality review of uncommitted changes.
What This Command Does
- Run git diff to identify changed files
- Security review - Hardcoded secrets, injection risks, input validation, OWASP Top 10
- Code quality - Function/file size, nesting, error handling, naming
- Generate report - CRITICAL, HIGH, MEDIUM, LOW with locations and suggested fixes
- Block commit if CRITICAL or HIGH issues found
When to Use
Use /code-review when:
- After writing or modifying code (MUST BE USED for all code changes)
- Before committing changes
- When security-sensitive code was added (auth, API, user input)
- When preparing for PR/code review
How It Works
The code-reviewer agent will run git diff, focus on modified files, and provide feedback organized by priority (Critical → Warnings → Suggestions) with specific fix examples.
Related
- Agent:
agents/code-reviewer.md - Use security-reviewer for deeper security audits on auth/API/payment code
Related Skills
ihj04982/wcag-audit-patterns
development
VerifiedTrustedCommunity
Conduct WCAG 2.2 accessibility audits with automated testing, manual verification, and remediation guidance. Use when auditing websites for accessibility, fixing WCAG violations, or implementing accessible design patterns.
SKILL.mdUpdated Apr 5, 2026
ihj04982/vs-research-ideate
research
VerifiedTrustedCommunity
Generate high-entropy research (자료조사) and ideas (아이디어) using Verbalized Sampling to avoid mode collapse and maximize creativity and novelty.
SKILL.mdUpdated Apr 5, 2026
ihj04982/vercel-react-best-practices
development
VerifiedTrustedCommunity
React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
SKILL.mdUpdated Apr 5, 2026
ihj04982/update-docs
documentation
VerifiedTrustedCommunity
Sync documentation from source-of-truth (package.json, .env.example). Generates CONTRIB.md, RUNBOOK.md. Use when updating project docs or after adding scripts/env vars.
SKILL.mdUpdated Apr 5, 2026