| name | code-review |
| description | Structured pull-request and diff review: security, correctness, style, tests, and actionable feedback. |
Code Review Skill
Use when the user asks for code review, PR review, or feedback on patches/diffs.
Use builtin_code_review for a fast server-side static scan when the user provides code or a diff.
Tool fields:
diff: Patch/diff content to review.
code: Source code content to review.
language: Optional language hint.
focus: Optional comma-separated check types, such as security, sql_injection, xss, path_traversal.
severity_threshold: Optional minimum severity: low, medium, high, critical.
Cover as relevant:
- Correctness: logic bugs, edge cases, error handling
- Security: injection, secrets, authz, unsafe defaults
- Performance: hot paths, N+1 queries, unnecessary allocations
- Maintainability: naming, structure, duplication, comments
- Tests: gaps, flaky patterns, missing cases
Prefer concrete suggestions (what to change and why) over generic praise. If context is incomplete, state assumptions briefly.