code-review-and-quality: a Claude Code skill by Addy Osmani
For developers who want a structured review of a diff or pull request before merging. Skip it if you only want a quick style lint or the project has no tests to run.
- Score
- 77of 100
- Rank
- #86of 239
- Installs
- 84.9Kon skills.sh
- Security
- Mixed 5 scanners
- Updated
- 2026
- Context
- ~87tokens always
Install
npx skills add https://github.com/addyosmani/agent-skills --skill code-review-and-quality Run it in your terminal. View the source
Using the Claude app rather than Claude Code? You can add a skill there too. How to add it in the app
What does code-review-and-quality do?
code-review-and-quality is a skill that reviews a change on five axes: correctness, readability, architecture, security and performance. It first asks what the change is meant to do, then reads the tests and checks them by experiment: it flips one condition, runs the suite, and restores the file. Each finding gets a label such as Critical, Nit, Optional or FYI, ordered by impact, and is checked against callers and guards before it is reported. It also sets size targets near 100 changed lines, reviews dependency bumps one package at a time, asks before deleting dead code, and ends with Approve or Request changes.
When should you use code-review-and-quality?
Use it when
- You want a pull request reviewed before merging
- Another agent wrote code you need to judge
- You want to know if your tests would catch a regression
Skip it when
- You only want formatting or lint fixes
- There is no diff or change to review
What it needs and what it can touch
What it can do
- Reads project files
- Runs the test suite
- Edits a file briefly to test a mutation, then restores it
From reading its instructions, not from running it.
Why it scores 77
Strongest on upkeep (100 of 100), weakest on trust (59).
Is code-review-and-quality safe to install?
At least one scanner raised a medium warning. Read the results below. Scanners often miss what other scanners catch, and a skill can change after a scan. Read its source before you install it.
| Scanner | Result | Date |
|---|---|---|
| Gen Agent Trust Hub | Passed | Nov 1, 2026 |
| Socket | Passed | Nov 1, 2026 |
| Snyk | Medium risk | Nov 1, 2026 |
| Runlayer | Medium risk | Feb 22, 2026 |
| ZeroLeaks | Passed | Apr 16, 2026 |
Details
- Installs
- 84,872
- Repository stars
- 114,643
- Last repository change
- Tokens always loaded
- about 87
- Tokens when used
- about 5,201
- License
- MIT
- Data confidence
- High
Did it do the job for you?
Alternatives to code-review-and-quality
All skills for this job-
Get ponytail-reviewponytail-review
For developers who want a plain-English review of a change that ends in a ship or fix verdict.
- Get ponytail-audit
ponytail-audit
For developers or founders who want a whole repo audited in plain English and ranked by risk.
-
Get review-prreview-pr
For teams running automated PR reviews in CI who want structured JSON output instead of direct GitHub posts.
-
Get thermo-nuclear-code-quality-reviewthermo-nuclear-code-quality-review
For developers who want a very strict maintainability review of a branch that pushes for big simplifications.
code-review-and-quality