Does this skill modify my code automatically?

No, this skill is strictly non-modifying. It performs analysis and generates reports but does not change your source code, ensuring you maintain full control over implementations.

Where are the review reports stored?

Reports are generated in markdown format and stored within your project's directory (typically under docs/temp/) for easy reference, sharing, and version control.

What architectural standards does it follow?

The skill assesses code against CUPID principles (Composable, Unix-style, Predictable, Idiomatic, Domain-aligned) and Domain-Driven Design (DDD) patterns to ensure long-term maintainability.

Does it check for security vulnerabilities?

Yes, it includes a dedicated security review phase that checks for OWASP Top 10 issues, including injection risks, authentication flaws, and sensitive data exposure.

Can it review GitHub Pull Requests?

Yes, it can integrate with the GitHub CLI to fetch PR diffs by number, allowing Claude to perform comprehensive reviews on proposed changes before they are merged.

Automated Code Review Workflow

Name: Automated Code Review Workflow
Author: tolo

bytolo

0•

Collaboration Tools

Performs comprehensive code audits across quality, security, architecture, and UI/UX to ensure production-grade standards.

The Code Review skill is a specialized workflow for Claude Code that automates the assessment of code changes, pull requests, and existing implementations. It systematically evaluates software through four critical lenses: code quality, security vulnerabilities, architectural integrity (using CUPID and DDD principles), and UI/UX compliance. By leveraging standardized checklists and project-specific guidelines, it generates prioritized markdown reports that categorize findings into critical, high, and suggestive tiers, helping developers maintain high technical standards and identify technical debt without manual overhead.

Key Features

01Prioritized reporting with actionable critical and high-priority findings

02Architectural validation against CUPID principles and Domain-Driven Design patterns

03Automated Pull Request diff analysis via GitHub CLI integration

04Static analysis and linting integration based on project-specific guidelines

050 GitHub stars

06Multi-dimensional analysis covering security, architecture, quality, and UI/UX

Use Cases

01Automating initial Pull Request reviews to catch security flaws and logic errors before human review

02Validating UI/UX consistency and accessibility compliance (WCAG) in frontend changes

03Conducting deep architectural audits during refactoring or system migration phases

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add tolo/coding-agent-toolkit code-review

For use in Claude.ai and ChatGPT

Download Skill