Systematic code review patterns covering security, performance, maintainability, correctness, and testing — with severity levels, structured feedback guidance, review process, and anti-patterns to avoid. Use when reviewing PRs, establishing review standards, or improving review quality.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Code Review Checklist
Thorough, structured approach to reviewing code. Work through each dimension systematically rather than scanning randomly.
## Installation
### OpenClaw / Moltbot / Clawbot
```bash
npx clawhub@latest install code-review
```
---
## Review Dimensions
| Dimension | Focus | Priority |
|-----------|-------|----------|
| Security | Vulnerabilities, auth, data exposure | Critical |
| Performance | Speed, memory, scalability bottlenecks | High |
| Correctness | Logic errors, edge cases, data integrity | High |
| Maintainability | Readability, structure, future-proofing | Medium |
| Testing | Coverage, quality, reliability of tests | Medium |
| Accessibility | WCAG compliance, keyboard nav, screen readers | Medium |
| Documentation | Comments, API docs, changelog entries | Low |
---
## Security Checklist
Review every change for these vulnerabilities:
- [ ] **SQL Injection** — All queries use parameterized statements or an ORM; no string concatenation with user input
- [ ] **XSS** — User-provided content is escaped/sanitized before rendering; `dangerouslySetInnerHTML` or equivalent is justified and safe
…
The line at the top of this page pins the label v1, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
GET https://markdownregistry.com/api/v1/artifacts/art_j6uzupfef4vj2szm
GET https://markdownregistry.com/api/v1/resolve?ref=pr-e/openclaw-master-skills/code-review
GET https://markdownregistry.com/api/v1/blob/dd1241323156298a6549476b0e896bb776fc95eab470706402a6ef6637d75c08
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
pr-e/openclaw-master-skills · SKILL.md · A curated collection of 339+ best OpenClaw skills — AI tools, productivity, marketing, frontend, mobile, backend…
pr-e/openclaw-master-skills · skills/1password/SKILL.md · Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or…
pr-e/openclaw-master-skills · skills/ab-test-setup/SKILL.md · When the user wants to plan, design, or implement an A/B test or experiment. Also use when the user mentions "A/B…
pr-e/openclaw-master-skills · skills/academic-deep-research/SKILL.md · Transparent, rigorous research with full methodology — not a black-box API wrapper. Conducts exhaustive investigation…
pr-e/openclaw-master-skills · skills/add-educational-comments/SKILL.md · Add educational comments to the file specified, or prompt asking for file to comment if one is not provided.
pr-e/openclaw-master-skills · skills/agent-browser-clawdbot/SKILL.md · Headless browser automation CLI optimized for AI agents with accessibility tree snapshots and ref-based element…
pr-e/openclaw-master-skills · skills/agent-browser/SKILL.md · A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click…
pr-e/openclaw-master-skills · skills/agent-governance/SKILL.md · Patterns and techniques for adding governance, safety, and trust controls to AI agent systems. Use this skill when:
-…
pr-e/openclaw-master-skills · skills/agent-reach/SKILL.md · Give your AI agent eyes to see the entire internet. 7500+ GitHub stars. Search and read 14 platforms: Twitter/X…
pr-e/openclaw-master-skills · skills/agent-team-orchestration/SKILL.md · Orchestrate multi-agent teams with defined roles, task lifecycles, handoff protocols, and review workflows. Use when…
agno-agi/agno · cookbook/02_agents/16_skills/sample_skills/code-review/SKILL.md · Code review assistance with linting, style checking, and best practices
kyegomez/swarms · examples/single_agent/capabilities/skills/multiple_skill_dirs/team_skills/code-review/SKILL.md · Review Python code for bugs, missing tests and security issues using the team's shared standards
basicmachines-co/basic-memory · .agents/skills/code-review/SKILL.md · Use when reviewing Basic Machines code for house style, architecture risk, pre-merge hardening, or whether a change…
nteract/semiotic · .github/skills/code-review/SKILL.md · Review Semiotic pull requests for behavioral bugs, regressions, contract drift, and missing evidence. Use for GitHub…
