code quality analyzer

    1

    Automated professional code review covering OWASP security, performance, and architectural patterns with remediations.

    $9

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned

    Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIMuseMuseDotsDots+22 more

    code quality analyzer

    Example session with this skill installed

    Review this TypeScript function for security and performance: async function loadData(id) { const user = await db.query("SELECT * FROM users WHERE id = " + id); return user; }

    • Read your context and instructions
    • Compiled the code quality analyzer

    I have completed a systematic review of the provided TypeScript function. The analysis identified one critical security vulnerability and one performance suggestion.

    Finding #1 - Security (Critical Severity)

    File: data-loader.ts:1
    Issue: SQL Injection vulnerability. The input id is concatenated directly into the query string without sanitization or parameterization.

    Impact:

    • An attacker can bypass authentication or extract the entire database by passing a crafted string (e.g., 1 OR 1=1).

    Remediation:

    // Before
const user = await db.query("SELECT * FROM users WHERE id = " + id);

// After
const user = await db.query("SELECT * FROM users WHERE id = $1", [id]);

    Finding #2 - Performance (Low Severity)

    File: data-loader.ts:1
    Issue: Unnecessary data retrieval. Using SELECT * fetches all columns, including potentially large blobs or sensitive fields not required by the caller.

    Impact:

    • Increases memory usage and network latency.

    Remediation:

    // After
const user = await db.query("SELECT id, username, email FROM users WHERE id = $1", [id]);

    Executive Summary

    • Total Findings: 2
    • Critical: 1 | High: 0 | Medium: 0 | Low: 1
    • Overall Risk Rating: CRITICAL

    Top Priorities Before Merge:

    1. Fix SQL Injection in loadData to prevent unauthorized database access.
    2. Implement column selection to optimize data transfer.

    Next steps

    • Apply the parameterized query fix immediately.
    • Define a strict User interface to limit the fields selected from the database.
    • Run a global scan for other instances of string concatenation in database queries.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    Manual code reviews are slow, inconsistent, and often miss critical security vulnerabilities. This skill provides a systematic static analysis framework for developers who need production-grade feedback on correctness, security, performance, and architecture without waiting for a human peer.

    What it does

    • Bug Detection identifies off-by-one errors, null dereferences, race conditions, and improper error handling.
    • Security Auditing scans for OWASP Top 10 vulnerabilities including injection, broken access control, and sensitive data exposure.
    • Performance Profiling flags N+1 query patterns, memory leaks, and inefficient algorithms.
    • Maintainability Review detects DRY violations, deep nesting, and complex logic requiring refactoring.
    • Architectural Validation checks for circular dependencies, separation of concerns, and pattern consistency.

    How it works

    1. Context Gathering where the agent reads changed files, commit history, and existing codebase patterns.
    2. Systematic Analysis involving a multi-dimensional scan from correctness to architecture.
    3. Findings Documentation where each issue is logged with severity, impact, and a specific code remediation.
    4. Summary Reporting providing an executive risk rating and a prioritized list of blockers.

    Frameworks & tools

    This skill is language-agnostic with specialized rules for JavaScript, TypeScript, Python, Java, C#, and Go. It is optimized for use within Claude Code, Cursor, and other agentic CLI environments.

    Why this beats prompting it yourself

    Generic prompts often return vague advice or miss domain-specific security risks like XXE or insecure deserialization. This skill enforces a structured severity-based reporting format and a systematic five-pillar review process that ensures no category is overlooked.

    Use cases

    • Pre-merge Quality Gate to catch critical bugs and security flaws before they hit the main branch.
    • Legacy Refactoring to identify technical debt and maintainability issues in old modules.
    • Onboarding Audits to ensure new contributors are following established architectural patterns.
    • Security Hardening for a focused deep-dive into OWASP Top 10 compliance for new features.

    Known limitations

    Does not execute code or perform runtime benchmarking. Security findings are heuristic-based and require manual verification. Architecture suggestions assume standard patterns.

    How to use

    Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scanned

    Verified clean 13 days ago

    • Passed all security checks, Safe to install

    Listed13 days ago

    What's inside

    Frequently Asked Questions