Skip to content
Back to skills

Code Review Pipeline

ASecurity

Multi-dimensional code review across correctness, security, performance, and maintainability with confidence-gated reporting and remediation loops.

  • 1,760 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added May 29, 2026
ai-agentsgobashsqlcode-reviewdatabasesecurityperformancedocumentation

Works with

  • claude code

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned May 29, 2026

npx -y skills add a5c-ai/babysitter --skill code-review-pipeline --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Code Review Pipeline?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Code Review Pipeline
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/a5c-ai-code-review-pipeline/badge)](https://www.skillsdirectory.com/skills/a5c-ai-code-review-pipeline)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: code-review-pipeline
description: Multi-dimensional code review across correctness, security, performance, and maintainability with confidence-gated reporting and remediation loops.
allowed-tools: Read, Bash, Grep, Glob
---

# Code Review Pipeline

## Overview

Multi-dimensional code review methodology adapted from the Everything Claude Code project. Reviews across 4 dimensions with confidence-gated issue reporting and automated remediation loops.

## Review Dimensions

### Dimension 1: Correctness
- Logic errors and off-by-one mistakes
- Edge case handling (null, undefined, empty, boundary)
- Type safety (no implicit any, proper narrowing)
- Error handling completeness
- Floating promise detection
- Race condition analysis

### Dimension 2: Security
- Injection vectors (SQL, XSS, command, template)
- Authentication and authorization gaps
- Data exposure (PII, credentials, internal state)
- Dependency vulnerabilities (known CVEs)
- Input validation completeness

### Dimension 3: Performance
- Algorithmic complexity (O(n^2) detection)
- Memory leaks (event listeners, closures, caches)
- Unnecessary allocations in hot paths
- Database query optimization (N+1, missing indexes)
- Bundle size impact

### Dimension 4: Maintainability
- Naming clarity and consistency
- Documentation completeness (JSDoc, inline comments)
- Test coverage adequacy
- Coupling analysis (afferent/efferent)
- File organization compliance

## Confidence Gating
- Score each issue 0-100 on confidence
- Only report issues >= 80% confidence
- Prevents false positive noise
- Higher confidence for clear patterns, lower for heuristic matches

## Remediation Loop
- Prioritize: critical > high > medium > low
- Apply fixes via refactor-cleaner agent
- Re-review after remediation
- Maximum 2 remediation cycles
- Exit when no critical/high issues remain

## When to Use

- Post-implementation review
- Pre-merge PR review
- Security audit
- Technical debt assessment

## Agents Used

- `code-reviewer` (primary)
- `refactor-cleaner` (remediation)

Files in this skill

  • README.md248 B
  • SKILL.md2 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.