code-reviewer

What This Skill Does

The code-reviewer skill is a powerful automated static analysis and quality assessment tool designed for modern development workflows. It integrates into your repository to provide a systematic evaluation of pull requests and source code. By leveraging three specialized sub-tools—the PR Analyzer, Code Quality Checker, and Review Report Generator—it identifies potential vulnerabilities like hardcoded secrets, SQL injection risks, and debugging artifacts, while simultaneously ensuring adherence to SOLID principles and code health metrics. It is designed to support TypeScript, JavaScript, Python, Go, Swift, and Kotlin, providing teams with objective feedback before a human reviewer even begins their pass.

Installation

To integrate the code-reviewer into your environment, use the OpenClaw management command in your terminal:

clawhub install openclaw/skills/skills/alirezarezvani/cs-code-reviewer

Ensure that you have the necessary permissions to access the target repository, as the skill requires file-read access to perform a comprehensive static analysis of your source code.

Use Cases

• Automated PR Gatekeeping: Automatically run the PR Analyzer on new pull requests to catch high-risk issues like secrets or insecure patterns before merging.
• Technical Debt Management: Periodically use the Code Quality Checker to identify long functions, God classes, and deep nesting across your codebase.
• Review Standardization: Use the Review Report Generator to produce consistent, markdown-formatted reports that provide a clear verdict (Approve vs. Request Changes) based on a 0-100 score, ensuring all PRs meet project standards.
• Onboarding Support: Help junior developers learn best practices by providing instant feedback on their code submissions regarding complexity and architectural smells.

Example Prompts

1. "@code-reviewer analyze the current branch and give me a summary of any high-risk code quality issues that need immediate attention."
2. "@code-reviewer run a full quality check on /src/components and generate a markdown report for my current pull request."
3. "@code-reviewer identify all TODOs and complex functions in the user-authentication service, and prioritize them by complexity score."

Tips & Limitations

• Pre-computed Analyses: You can chain the tools by saving JSON outputs and passing them to the report generator to speed up workflows for large repositories.
• Threshold Tuning: While the tool has default thresholds (e.g., 50 lines for functions), remember that code health is context-dependent. Use the tool as a decision-support aid, not a final arbiter.
• Security: Always verify the report output. While the tool is excellent at catching common vulnerabilities, it is not a replacement for comprehensive security penetration testing or human architectural review.
• Limitations: The tool performs static analysis. It cannot evaluate runtime behavior, logic errors that require business domain knowledge, or complex state management issues that are not captured in the syntax structure.