Claude Code Plugins

Community-maintained marketplace

Feedback

Comprehensive code review for security, performance, and maintainability. Activates when asked to "review code", "check this code", "audit", "find bugs", "security review", or when reviewing PRs or diffs.

Install Skill

1Download skill
2Enable skills in Claude

Open claude.ai/settings/capabilities and find the "Skills" section

3Upload to Claude

Click "Upload skill" and select the downloaded ZIP file

Note: Please verify skill by going through its instructions before using it.

SKILL.md

code-review

Expert code review for security, performance, maintainability. Generates checklists and identifies issues.

Metadata

  • Version: 1.0.0
  • Category: code-quality
  • Source: workspace

Tags

code-review, security, performance, quality

MCP Dependencies

None specified

Inputs

  • language (string) (optional): Programming language (typescript, python, go, etc.)
  • focus (string) (optional): Focus area: security, performance, maintainability, all

Workflow

No workflow defined

Anti-Hallucination Rules

None specified

Verification Checklist

None specified

Usage

// Execute via MCP Gateway:
gateway_execute_skill({ name: "code-review", inputs: { ... } })

// Or via REST API:
// POST /api/code/skills/code-review/execute
// Body: { "inputs": { ... } }

Code


const { language = 'typescript', focus = 'all' } = inputs;

const checklists = {
  security: [
    'Check for hardcoded secrets, API keys, tokens',
    'Verify input validation and sanitization',
    'Check for SQL injection, XSS, command injection',
    'Verify authentication/authorization on endpoints',
    'Check for proper encryption of sensitive data'
  ],
  performance: [
    'Identify N+1 query problems',
    'Check for memory leaks in useEffect cleanup',
    'Verify pagination for large datasets',
    'Check for blocking operations on main thread',
    'Look for redundant computations'
  ],
  maintainability: [
    'Functions should be single-purpose, under 20 lines',
    'Check for DRY violations and duplicated logic',
    'Verify descriptive naming, no magic numbers',
    'Check proper TypeScript types, avoid any',
    'Ensure meaningful error messages'
  ]
};

const areas = focus === 'all' ? Object.keys(checklists) : [focus];
let result = `# Code Review Checklist (${language})\n\n`;

for (const area of areas) {
  if (checklists[area]) {
    result += `## ${area.charAt(0).toUpperCase() + area.slice(1)}\n`;
    for (const item of checklists[area]) {
      result += `- [ ] ${item}\n`;
    }
    result += '\n';
  }
}

console.log(result);

Created: Mon Dec 22 2025 10:35:19 GMT+0800 (Singapore Standard Time) Updated: Mon Dec 22 2025 10:35:19 GMT+0800 (Singapore Standard Time)