Code Review Agent Skills

Review local branch changes for bugs, security vulnerabilities, and code quality issues using a structured checklist-driven process.

Create pull requests with structured descriptions based on committed branch diffs, following Sentry's engineering practices.

Transforms working code into clean, readable, and maintainable code following Robert C. Martin's principles.

Automates the cycle of fixing CI failures, addressing PR review feedback, and pushing changes until all checks pass.

Analyzes code for logical errors, race conditions, security vulnerabilities, and algorithmic flaws using structured reasoning across 9 risk categories.

Finds, analyzes, and strategizes for high-impact open source contribution opportunities in trending repositories.

Enforces dense, correct, and idiomatic code on all coding tasks, minimizing code bloat and agent operation overhead.

Reviews and authors Cloudflare Workers code against production best practices, covering configuration, request handling, architecture, observability, code patterns, and security.

Audits test files for anti-patterns and quality issues, producing a severity-ranked report across multiple languages and frameworks.

Detects and fixes common MSBuild anti-patterns in .csproj, .vbproj, .fsproj, .props, .targets, and .proj files, covering Exec misuse, unquoted conditions, hardcoded paths, and more.

Scan C# source files for hard-to-test static dependencies and produce a ranked report of static call sites by frequency.

Scans C#/.NET code for ~50 performance anti-patterns across async, memory, strings, collections, LINQ, regex, serialization, and I/O with tiered severity classification.

Detect and fix code-quality and correctness issues in AEM as a Cloud Service projects locally, without external services or network calls.

Review code for AEM Edge Delivery Services projects, validating code quality, performance, accessibility, and adherence to EDS best practices during self-review or pull request review.

Migrate javax.inject.@Inject fields in Sling Model classes to injector-specific annotations like @ValueMapValue, @OSGiService, or @SlingObject based on the field's declared type.

Create, refresh, and rewrite PR titles and descriptions following Sentry conventions, focusing on reviewer-facing content that describes the full branch diff.

Iterate on a pull request until actionable CI checks pass and high/medium review feedback is addressed, stopping at human approval, draft, or merge gates.

Review pull requests following Sentry engineering practices, covering security, performance, testing, and design.

Fetch unread GitHub notifications for open PRs where review is requested from a specified team or opened by a team member.

Analyze a codebase and generate a structured map of files relevant to a task before making changes.

Open a GitHub PR dashboard in the browser for a specified date range and role filter.

Scans codebases for security vulnerabilities by reasoning about code context, data flow, and component interactions, covering injection flaws, secrets exposure, authentication issues, and weak cryptography across multiple languages.

Performs comprehensive SQL code review across all major databases, analyzing security, performance, maintainability, and anti-patterns.

Runs a complete quality engineering audit on any codebase, deriving behavioral requirements, generating spec-traced tests, performing multi-pass code review, and producing a consolidated bug report with verified patches.

Enforce code quality with Ruff in a controlled, iterative workflow: run checks with optional scope and rule overrides, apply safe and unsafe autofixes, review diffs, and resolve remaining findings.

Automates repeated rounds of Copilot code review on GitHub pull requests: triggers review, triages threads, dispatches parallel fix agents, commits, replies, and loops until convergence.

Ensure .NET/C# code meets project-specific best practices for structure, design patterns, dependency injection, async/await, testing, configuration, and security.

Follow a project's contribution guidelines when creating issues, branches, commits, and pull requests.

Review PostgreSQL code for best practices, anti-patterns, and quality standards including JSONB, arrays, custom types, schema design, functions, and security features like Row Level Security.

Audits iOS app source code and metadata to identify App Store rejection risks and optimization opportunities, producing a structured compliance report.

Enforces bulk-safety rules, sharing model requirements, CRUD/FLS security, SOQL injection prevention, PNB test coverage, and modern Apex idioms for Salesforce development.

Provides grep scan commands for auditing React codebases before upgrading to React 18.3.1 or React 19.

Review C#/.NET code for design pattern implementation and suggest improvements without making changes.

Audits Rust codebases for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes.

Runs external LLM code reviews (OpenAI Codex or Google Gemini CLI) on uncommitted changes, branch diffs, or specific commits.

Runs full Trailmark structural analysis by building a graph and computing pre-analysis passes for hotspots, taint, blast radius, privilege boundaries, and attack surface.