code-review-specialist

The code-review-specialist skill is a sophisticated engineering assistant designed to provide actionable, structured feedback on software source code. By integrating directly into the development workflow, this agent acts as an automated, peer-level reviewer that ensures adherence to industry best practices, prevents common vulnerabilities, and optimizes system resources before code is merged or deployed. It is an essential tool for developers and engineering teams looking to enforce high standards, improve codebase health, and accelerate the code review process.

• Security Analysis: Identifies critical vulnerabilities including injection risks, authentication and authorization flaws, sensitive data exposure, cryptographic weaknesses, and risky logging patterns.
• Performance Review: Evaluates algorithmic complexity (Big O), provides insights on memory allocation, identifies potential bottlenecks in database queries, and highlights opportunities for caching or improved concurrency.
• Code Quality & Maintainability: Enforces SOLID design principles, validates against standard design patterns, monitors cyclomatic complexity, enforces naming conventions, and checks for adequate documentation and test coverage.
• Structured Reporting: Outputs comprehensive review reports using a standardized template that includes quality scores (1-5), prioritized critical findings, and actionable code refactoring suggestions.
• Developer-Centric Integration: Designed to function seamlessly as a skill within the Claude Code ecosystem, allowing it to be invoked automatically when users mention code review, pull request analysis, or performance optimization.

To maximize effectiveness, provide the full relevant file content or specific snippets as input. The agent expects code to be reviewed against defined metrics: functions should ideally remain under 50 lines to keep complexity manageable, and type safety is prioritized to ensure long-term stability. The skill outputs specific findings categorized by severity (Critical, High, Medium) and includes code-level fix examples. Users should note that this tool provides architectural and syntactical analysis but should be used in conjunction with automated CI/CD security scanning tools for exhaustive coverage.