# Code Review

> Review pull requests for bugs, security issues, and maintainability problems with structured findings. Use when reviewing PRs, diffs, or code changes. Do NOT use for writing new features from scratch.

- Skill: `bjg4/code-review-4` (Agent Skill)
- Install (CLI): `npx skillmds@latest add bjg4/code-review-4`
- Raw SKILL.md: https://api.skillmd.com/api/skills/bjg4/code-review-4/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: bjg4 (https://skillmd.com/u/bjg4)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/bjg4/code-review-4

---


# Code Review

## Quick start

Read the diff or code snippet. Produce findings grouped by severity (critical, major, minor). Each finding: location, issue, suggested fix.

## Workflow

1. Scan for security issues first (injection, auth, secrets, unsafe defaults).
2. Check correctness and error handling paths.
3. Assess maintainability (naming, duplication, missing tests).
4. Output structured review — not a rewrite unless asked.

## Output format

```markdown
## Critical
- [file:line] Issue — suggested fix

## Major
...

## Minor
...
```

## Error handling

If code context is missing, ask for the diff or file. If outside review scope, say so and suggest the right skill.