MR
Mayur Rathi
@mayurrathi
⭐ 5 GitHub stars

AI Code Review Checklist

AI Code Review Checklist是一款code方向的AI技能,核心价值是A comprehensive, repeatable code review checklist covering functionality, security, performance, code quality, tests, and documentation — with specific checkpoints, examples, and comment templates,可用于解决开发者在code领域的实际问题,帮助用户提升效率、自动化重复任务或优化工作流。

A comprehensive, repeatable code review checklist covering functionality, security, performance, code quality, tests, and documentation — with specific checkpoints, examples, and comment templates.

Last verified on: 2026-05-27
mkdir -p ./skills/ai-code-review-checklist && curl -sfL https://raw.githubusercontent.com/mayurrathi/awesome-agent-skills/main/skills/ai-code-review-checklist/SKILL.md -o ./skills/ai-code-review-checklist/SKILL.md

Run in terminal / PowerShell. Requires curl (Unix) or PowerShell 5+ (Windows).

Skill Content

# AI Code Review Checklist


Purpose

Conduct thorough, consistent code reviews using a comprehensive systematic checklist.


Review Checklist


Functionality

- [ ] Code solves the stated problem

- [ ] All acceptance criteria met

- [ ] Edge cases handled

- [ ] Error handling appropriate


Security

- [ ] Input validation and sanitization

- [ ] SQL injection prevented

- [ ] XSS/CSRF protection

- [ ] Auth required where needed

- [ ] No hardcoded secrets


Performance

- [ ] No unnecessary DB queries

- [ ] No N+1 problems

- [ ] Efficient algorithms

- [ ] No memory leaks

- [ ] Proper indexing


Code Quality

- [ ] Readable, descriptive names

- [ ] Single Responsibility

- [ ] No duplication (DRY)

- [ ] No dead code or TODOs

- [ ] Magic numbers → constants


Tests

- [ ] New code has tests

- [ ] Edge cases covered

- [ ] Tests pass in CI/CD


Git

- [ ] Clear commit messages

- [ ] No merge conflicts

- [ ] No unnecessary files

🎯 Best For

  • Engineering teams doing code reviews
  • Open source maintainers
  • Security auditors
  • DevSecOps teams
  • Compliance officers

💡 Use Cases

  • Reviewing pull requests for security vulnerabilities
  • Checking code style consistency
  • Auditing dependencies for known CVEs
  • Scanning API endpoints for auth gaps

📖 How to Use This Skill

  1. 1

    Install the Skill

    Copy the install command from the Terminal tab and run it. The SKILL.md file downloads to your local skills directory.

  2. 2

    Load into Your AI Assistant

    Open Claude or ChatGPT and reference the skill. Paste the SKILL.md content or use the system prompt tab.

  3. 3

    Apply AI Code Review Checklist to Your Work

    Open your project in the AI assistant and ask it to apply the skill. Start with a small module to verify the output quality.

  4. 4

    Review and Refine

    Review AI suggestions before committing. Run tests, check for regressions, and iterate on the skill output.

❓ Frequently Asked Questions

Does this skill check for OWASP Top 10?

Security-focused review skills often include OWASP checks. Check the skill content for specific vulnerability categories covered.

Can this replace a dedicated SAST tool?

AI-based security review is complementary to SAST tools. Use it as a first-pass filter, not a replacement.

Does this generate test mocks?

Many testing skills include mock generation. Check the install command and skill content for details.

Does it follow my documentation style?

Most documentation skills respect existing style. Provide a style guide or example in your prompt.

Is AI Code Review Checklist compatible with Cursor and VS Code?

Yes — this skill works with any AI coding assistant including Cursor, VS Code with Copilot, and JetBrains IDEs.

⚠️ Common Mistakes to Avoid

Blindly accepting AI suggestions

Always verify AI-generated review comments. Some suggestions may not apply to your specific codebase conventions.

Only scanning surface-level issues

Deep security review requires understanding your app architecture, not just regex patterns.

Not testing edge cases

AI tends to generate happy-path tests. Manually review for boundary conditions.

Auto-generating without reviewing

AI documentation can contain inaccuracies. Always verify technical accuracy.

🔗 Related Skills