Works with the AI tools you already use

    CClaude CodeCCursorCCodex CLIGGitHub CopilotGGemini CLIVVS CodeWWindsurf+15 more

    Code Review Buddy

    by Roy Yuen

    2

    Structured, severity-aware code reviews focusing on security, bugs, and performance across all major languages.

    $5

    30-day refund guarantee

    Secure checkout via Stripe

    0 installsSecurity scanned

    See it in action

    You say

    Review this Python function for security issues and efficiency: def get_user(id): query = "SELECT * FROM users WHERE id = " + id return db.execute(query).fetchall()

    Your agent does

    🔍 Code Review: User Query Function Language: Python

    🔴 Security • line 2 SQL injection risk via string concatenation. Fix: Use parameterized queries: db.execute("SELECT * FROM users WHERE id = ?", (id,))

    Summary: 1 issue found — 1 critical Verdict: 🛑 Do not ship

    What you get

    Identify SQL injection and local path traversal vulnerabilities in web code.Detect resource leaks like unclosed files or database connections.Verify AI agent skill files for YAML errors and workflow logic gaps.Optimize O(n²) loops and inefficient data structure handling.Audit shell scripts for unquoted variables and unsafe command execution.

    About this skill

    High-Performance Code Review for Humans and Agents

    Code Review Buddy is a developer-centric skill designed to provide structured, actionable feedback on code snippets, files, and pull requests. Unlike generic AI suggestions, this skill follows a strict hierarchical review process that prioritizes critical security vulnerabilities and functional bugs over subjective style choices.

    What it does

    • Security First: Scans for SQL injection, path traversal, hardcoded secrets, and unsafe deserialization across multiple languages.
    • Bug Detection: Identifies logic errors, race conditions, resource leaks, and language-specific pitfalls (like Python's mutable default arguments).
    • Performance Analytics: Flags N+1 queries, inefficient string operations, and memory-intensive file handling.
    • Agent Skill Validation: A unique feature that audits other AI agent skill files for YAML syntax, workflow logic, and trigger consistency.

    Why use this skill

    Stop wasting time on "style lectures." This skill focuses on code health and correctness. It generates standardized reports with severity icons (🔴 Critical to ⚪ Info), making it easy to see exactly what needs to be fixed before a merge. It understands the nuances of Python, JavaScript, TypeScript, Go, and Shell, applying language-specific best practices out of the box. Output is formatted specifically for terminal-based developers and AI IDEs like Cursor or Claude Code.

    code-review
    python
    typescript
    static-analysis

    How to install

    Drop the file into your AI Agent. Works with Claude, Cursor, ChatGPT, and 20+ more.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    30-day refund

    Not a fit? Get your money back

    Trust & safety

    Security scanned

    Verified clean 1 month ago

    Listed1 month ago

    Creator

    Roy Yuen

    Frequently Asked Questions

    Popular in Code Review

    🧪 AI Build Sanity Check

    🧪 AI Build Sanity Check

    Scan local Python, JavaScript, TypeScript, JSX/TSX, HTML, JSON, and .env files for build markers, returned fake-data terms, swallowed errors, placeholders, route-adjacent canned success, and advisory empty handlers. Read-only findings include rule, severity, file, line, and a plain fix.

    $13
    1

    pr-reviewer

    Automated, high-precision code reviews that detect bugs, security flaws, and performance bottlenecks in your PRs.

    $12
    2
    codegraph-ast-grep

    codegraph-ast-grep

    Supercharge repo exploration and refactoring with semantic call-graph tracing and structural AST pattern matching.

    Free
    4

    typescript-type-auditor

    Deep audit of TypeScript codebases for type safety violations, unsafe casts, and runtime-risk anti-patterns.

    Free
    2