- Home
- Skills
- Code Quality & Review
- Code Review Aid
Works with the AI tools you already use
Code Review Aid
Automated git diff auditor that catches leaked secrets, debug code, and missing tests before your pull request.
$9.99
Code Review Aid
Example session with this skill installed
Run a code review on my staged changes. I have modified a user authentication controller and added a new database migration.
- Read your context and instructions
- Compiled the code review aid
I have analyzed the staged changes in your repository. The diff includes 3 files with approximately 140 lines of code.
Code Review Report
| Category | Finding | Severity |
|---|---|---|
| Security | Hard-coded internal URL detected in auth_controller.rb:42 | High |
| Hygiene | Leftover console.log(user_data) found in session_helper.js:12 | Low |
| Architecture | Large function validate_and_reconcile_session (62 lines) exceeds recommended limit | Med |
| Testing | Source auth_controller.rb changed, but no matching files in /spec found | High |
| Risk | Schema migration 20231027_add_role_to_users.rb modifies a core table | Med |
Inline Comments
auth_controller.rb:42
endpoint = "http://internal.dev.auth.service/v1"
Suggestion: Move this URL to an environment variable or credentials encrypted file to avoid hard-coding environment-specific endpoints.
session_helper.js:12
console.log("Debug session:", data);
Suggestion: Remove debug statements before merging to production.
20231027_add_role_to_users.rb
Caution: This migration adds a column to the users table. Ensure you have checked for potential table locking if this table has millions of rows.
Next steps
- Remove the debug
console.logand move the auth URL toconfig/settings.yml. - Add a unit test in
spec/controllers/auth_controller_spec.rbto cover the new logic. - Verify the migration execution time on a staging database clone.
Connects securely to your tools. The creator never sees your data.
About this skill
Manual code reviews often miss the small, repetitive details that lead to technical debt or security vulnerabilities. This skill automates the pre-review process by scanning diffs for common oversights like leaked credentials, debug statements, and missing tests before they reach your peers.
What it does
- Diff Analysis checks staged changes, branch comparisons, or patch files for logic and hygiene issues.
- Hygiene Detection flags leftover
console.log,pdb,printstatements, and commented-out code blocks. - Security Audit identifies hard-coded credentials, risky URLs, and broad exception handling that masks errors.
- Structural Review alerts you to large new functions, risky migration changes, and config file modifications.
- Test Alignment verifies that source code changes are accompanied by corresponding updates in test files.
- Report Generation produces a Markdown checklist and inline-style comments ready for GitHub or GitLab.
How it works
- Target the diff using arguments for staged files, specific commit ranges, or comparisons against a base branch like
main. - Review the findings in the structured terminal output or a generated Markdown file.
- Address flags regarding missing tests, TODOs, or sensitive data identified by the tool.
- Export results to your pull request description or comments to streamline the formal review process.
Frameworks & tools
This skill works with any git-based project and supports standard diff/patch formats. It is language-agnostic but includes specific logic for common debuggers and patterns in Python, JavaScript, and Ruby.
Why this beats prompting it yourself
Generic prompts often miss context-specific risks like lockfile changes or migration impacts. This skill uses a structured inspection logic to ensure consistent coverage of hygiene, security, and test-ratio checks that a standard LLM prompt might overlook.
Use cases
- Self-reviewing staged changes to clean up debug code before running
git push. - Pre-screening a junior developer's PR to provide faster, automated feedback on style and safety.
- Auditing legacy patches or
.difffiles received from external contributors. - Generating PR checklists to prove that migrations and auth changes were specifically scrutinized.
Known limitations
Requires a git repository to analyze branch differences. It does not replace functional testing or language-specific deep static analysis tools like SonarQube.
How to use
Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
30-day refund
Not a fit? Get your money back
Trust & safety
Security scanned
Verified clean today
- Passed all security checks, Safe to install