code-review-pipeline
Multi-dimensional code review across correctness, security, performance, and maintainability with confidence-gated reporting and remediation loops.
npx skills add a5c-ai/babysitter --skill code-review-pipeline --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
- Logic errors and off-by-one mistakes - Edge case handling (null, undefined, empty, boundary) - Type safety (no implicit any, proper narrowing) - Error handling completeness - Floating promise detection - Race condition analysis ### Dimension 2: Security - Injection vectors (SQL, XSS, command, template) - Authentication and authorization gaps - Data exposure (PII, credentials, internal state) - Dependency vulnerabilities (known CVEs) - Input validation completeness ### Dimension 3: Performance - Algorithmic complexity (O(n^2) detection) - Memory leaks (event listeners, closures, caches) - Unnecessary allocations in hot paths - Database query optimization (N+1, missing indexes) - Bundle size impact ### Dimension 4: Maintainability - Naming clarity and consistency - Documentation completeness (JSDoc, inline comments) - Test coverage adequacy - Coupling analysis (afferent/efferent) - File organization compliance ## Confidence Gating - Score each issue 0-100 on confidence - Only report issues >= 80% confidence - Prevents false positive noise - Higher confidence for clear patterns, lower for heuristic matches ## Remediation Loop - Prioritize: critical > high > medium > low - Apply fixe
- Dimension 2: Security
- Dimension 3: Performance
- Dimension 4: Maintainability
- Confidence Gating
- Remediation Loop
- When to Use
- Agents Used
What does the code-review-pipeline skill do?
Multi-dimensional code review across correctness, security, performance, and maintainability with confidence-gated reporting and remediation loops.
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill code-review-pipeline --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.