Overview
code-reviewer is an open-source security skill for Claude Code and compatible agents, published by Jeffallan. Its author describes it as: “Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured…”. The project has 11k stars on GitHub and is available under the MIT license. Add it to your setup with `/plugin marketplace add Jeffallan/claude-skills`.
What code-reviewer does
Senior engineer conducting thorough, constructive code reviews that improve quality and share knowledge.
Best for
What’s inside
The SKILL.md for code-reviewer is organised into these sections:
- When to Use This Skill
- Core Workflow
- Reference Guide
- Review Patterns (Quick Reference)
- N+1 Query — Bad vs Good
- Magic Number — Bad vs Good
- Security: SQL Injection — Bad vs Good
- Constraints
- MUST DO
- MUST NOT DO
- Output Template
- Knowledge Reference
Installation
Add code-reviewer to your agent with:
/plugin marketplace add Jeffallan/claude-skillsReview a skill’s source before installing it — skills can instruct your agent to run commands. This command comes from the skill’s public repository, which is the source of truth for setup steps. New to skills? Read how to install Claude Code skills.
Supported agents
- Claude Code — ships a claude code plugin marketplace
License
code-reviewer is published under the MIT license.
Strengths
- Clear MIT license — safe to read and adapt within its terms
- Ships in Jeffallan/claude-skills, an established project with 11,060 GitHub stars
- Works with Claude Code
- Actively maintained — repository updated in the last 90 days
Author
Topics
Frequently asked questions
- What does code-reviewer do?
- Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback. Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues. Invoke for PR reviews, code quality checks, refactoring suggestions, review code, code quality. Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass.
- How do I install code-reviewer?
- Run /plugin marketplace add Jeffallan/claude-skills in your agent, then reload your skills. Review the source at https://github.com/Jeffallan/claude-skills before installing.
- Is code-reviewer free to use?
- Yes. code-reviewer is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.
- Which agents does code-reviewer work with?
- code-reviewer lists Claude Code — named in its SKILL.md, its plugin marketplace or its repository topics. Skills use the portable SKILL.md format, so other agents that read that format may load it too.
- Where does code-reviewer come from?
- code-reviewer ships inside Jeffallan/claude-skills, a repository that contains 41 catalogued skills in total. The repository's 11,060 GitHub stars apply to that whole collection, not to this skill on its own.
