Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsBlogPro
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges
  • Chrome Extension
  • Skill Manager

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Code Review

ASecurity

Review the current diff in one pass.

5 stars
0 votes
0 copies
2 views
Added 10/6/2026
code-qualitygocode-review

Security Analysis

A100/100

Scanned 10/6/2026

$npx -y skills add aaronmallen/aaronmallen.me --skill code-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Code Review?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Code Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/aaronmallen-code-review/badge)](https://www.skillsdirectory.com/skills/aaronmallen-code-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
Files
SKILL.md
---
description: Review the current diff in one pass.
name: code-review
---

# Code review

Read the change once, check it against what it has to do and against this project's rules, and report what is
wrong.

Do not run this on a change that is only mechanical: a rename, a formatting pass, a dependency bump. Say so and
stop.

## 1. Read the current diff

**Always review the current diff. Never ask which revision.**

Read the working change the way [`.claude/vcs.md`][vcs] describes. That is the work in flight, which is what
this skill reviews. Keep the diff, the file list and the log.

Stop if the diff is empty. Say the working copy is clean and stop there.

## 2. Run the gate first

```sh
mise run lint
mise run test
```

**A red gate stops the review.** Report which check failed and stop. A failing build buries real findings under
symptoms of it.

A green gate means anything the linter or the suite would catch is already caught. Do not report it again.

## 3. Review it

Read every changed file in full, not only the hunks. Then check the change against:

- **What it has to do.** The issue or spec it carries out, when there is one. Does it do that for every input it
  will see?
- **This project's rules.** `.claude/CLAUDE.md`, `README.md` and the records in `docs/adr` that cover the area.
- **The code beside it.** A new file looks like the files next to it.

Report only what you can point at: a file, a line and what goes wrong. A finding you cannot tie to a line is a
guess, so leave it out. Behaviour the change never set out to add is a question for the user, not a finding to
fix.

## 4. Report

List each finding with its file and line, what goes wrong, and how bad it is: **blocking** when the change is
wrong or breaks a rule, **advisory** otherwise. Put the worst first.

End with one line: the blocking count and the worst finding.

[vcs]: .claude/vcs.md

Attribution

aaronmallenaaronmallen
View sourceSee grades on GitHubMore from aaronmallen →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman Review

Ultra-compressed code review comments. Cuts noise from PR feedback while preserving the actionable signal. Each comment is one line: location, problem, fix. Use when user says "review this PR", "code review", "review the diff", "/review", or invokes /caveman-review. Auto-triggers when reviewing pull requests.

1100021 votes

Caveman Commit

Ultra-compressed commit message generator. Cuts noise from commit messages while preserving intent and reasoning. Conventional Commits format. Subject ≤50 chars, body only when "why" isn't obvious. Use when user says "write a commit", "commit message", "generate commit", "/commit", or invokes /caveman-commit. Auto-triggers when staging changes.

1100021 votes

Springboot Verification

Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.

2456590 votes

Verification Loop

一个全面的 Claude Code 会话验证系统。

2456590 votes

Django Verification

Verification loop for Django projects: migrations, linting, tests with coverage, security scans, and deployment readiness checks before release or PR.

2456590 votes
View all in code-quality →