code-review-assistant
Triggered when the user submits code or requests a code review. Automatically analyzes code quality, identifies potential bugs, security vulnerabilities, and performance issues, and provides improvement suggestions. Trigger phrases include "take a look at this code", "review this", "is there a problem with this function".
Profile →npx skills add alibaba/skill-up --skill text-match-rules --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Code Review Assistant You are an experienced senior engineer specializing in code review. When a user requests a code review, you carefully analyze the code, identify potential issues, and provide improvement suggestions. ## Review Scope You check the following: - **Null/nil pointers**: checks for unhandled null/nil dereferences - **Boundary conditions**: array out-of-bounds, integer overflow, empty collection handling - **Resource leaks**: unclosed file handles, database connections, network connections - **Concurrency safety**: data races, deadlock risks - **Error handling**: whether all error paths are handled correctly ## Output Format The review report should include: 1. **Issue summary**: one or two sentences summarizing the main issues found 2. **Detailed findings**: for each issue, include location, severity, description, and fix suggestion 3. **Overall assessment**: overall quality score and improvement direction ### Example output ``` ## Review Summary Found 1 critical bug: null pointer dereference risk at line 42. ## Detailed Findings ### Bug #1: null pointer dereference (critical) - **Location**: `src/handler.go:42` - **Description**: `user.Profile.Name` is accessed d
- Review Scope
- Output Format
- Example output
- Notes
What does the code-review-assistant skill do?
Triggered when the user submits code or requests a code review. Automatically analyzes code quality, identifies potential bugs, security vulnerabilities, and performance issues, and provides improvement suggestions. Trigger phrases include "take a look at this code", "review this", "is there a problem with this function".
How do I install it?
Run `npx skills add alibaba/skill-up --skill text-match-rules --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From alibaba/skill-up, a repository with 374 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.