Does this skill modify my code automatically?

No, this skill is strictly non-modifying. It performs analysis and generates reports but does not change your source code, ensuring you maintain full control over implementations.

Where are the review reports stored?

Reports are generated in markdown format and stored within your project's directory (typically under docs/temp/) for easy reference, sharing, and version control.

What architectural standards does it follow?

The skill assesses code against CUPID principles (Composable, Unix-style, Predictable, Idiomatic, Domain-aligned) and Domain-Driven Design (DDD) patterns to ensure long-term maintainability.

Does it check for security vulnerabilities?

Yes, it includes a dedicated security review phase that checks for OWASP Top 10 issues, including injection risks, authentication flaws, and sensitive data exposure.

Can it review GitHub Pull Requests?

Yes, it can integrate with the GitHub CLI to fetch PR diffs by number, allowing Claude to perform comprehensive reviews on proposed changes before they are merged.

Automated Code Review Workflow

Name: Automated Code Review Workflow
Author: tolo

bytolo

Collaboration Tools

Performs comprehensive code audits across quality, security, architecture, and UI/UX to ensure production-grade standards.

About

The Code Review skill is a specialized workflow for Claude Code that automates the assessment of code changes, pull requests, and existing implementations. It systematically evaluates software through four critical lenses: code quality, security vulnerabilities, architectural integrity (using CUPID and DDD principles), and UI/UX compliance. By leveraging standardized checklists and project-specific guidelines, it generates prioritized markdown reports that categorize findings into critical, high, and suggestive tiers, helping developers maintain high technical standards and identify technical debt without manual overhead.

Key Features

Prioritized reporting with actionable critical and high-priority findings
Architectural validation against CUPID principles and Domain-Driven Design patterns
Automated Pull Request diff analysis via GitHub CLI integration
Static analysis and linting integration based on project-specific guidelines
0 GitHub stars
Multi-dimensional analysis covering security, architecture, quality, and UI/UX

Use Cases

Automating initial Pull Request reviews to catch security flaws and logic errors before human review
Validating UI/UX consistency and accessibility compliance (WCAG) in frontend changes
Conducting deep architectural audits during refactoring or system migration phases

About

Key Features

Prioritized reporting with actionable critical and high-priority findings
Architectural validation against CUPID principles and Domain-Driven Design patterns
Automated Pull Request diff analysis via GitHub CLI integration
Static analysis and linting integration based on project-specific guidelines
0 GitHub stars
Multi-dimensional analysis covering security, architecture, quality, and UI/UX

Use Cases

Automating initial Pull Request reviews to catch security flaws and logic errors before human review
Validating UI/UX consistency and accessibility compliance (WCAG) in frontend changes
Conducting deep architectural audits during refactoring or system migration phases