How do I install the Code Review Patterns skill?

Run npx skillmds@latest add a5c-ai/code-review-patterns in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Code Review Patterns skill do?

Multi-dimensional code assessment across security, quality, performance, and maintainability with confidence-gated reporting (>=80%) and Router Contract generation. It is listed under Security on SkillMD.

Is Code Review Patterns safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Code Review Patterns?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Code Review Patterns free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Code Review Patterns?

a5c-ai (@a5c-ai) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Code Review Patterns by a5c-ai — Agent Skill

Name: Code Review Patterns
Rating: 4.5 (4 reviews)
Author: a5c-ai

File contents

Injection vulnerabilities (SQL, XSS, command)
Authentication and authorization patterns
Secrets handling (no hardcoded credentials)
Input validation and sanitization

Quality (weight: 25%)

Naming conventions and consistency
Code structure (SRP, cohesion, coupling)
Error handling completeness
Type safety (no any escapes)

Performance (weight: 20%)

Algorithmic complexity (flag O(n^2) or worse)
Resource and memory leaks
Database query efficiency (N+1)
Caching opportunities

Maintainability (weight: 25%)

Documentation (JSDoc/TSDoc for public APIs)
Test coverage adequacy
Readability (function length, nesting depth)
Tech debt markers (TODO, FIXME)

Confidence Gating

Only report issues with confidence >= 80%
Empty catch blocks are always critical (100% confidence)
Classify: critical, high, medium, low
Include actionable remediation for each issue

Router Contract

Every review must produce: STATUS, BLOCKING, REQUIRES_REMEDIATION, issue counts.

When to Use

Code review step in BUILD workflow
Fix review in DEBUG workflow
Full REVIEW workflow

Agents Used

code-reviewer (primary consumer)
silent-failure-hunter (error handling dimension)

Frequently asked questions

Code Review Patterns