# code-review

- **Publisher**: Alibaba (Verified Publisher)
- **Repository**: https://github.com/alibaba/open-code-review
- **skills.sh URL**: https://skills.sh/alibaba/open-code-review/code-review
- **License**: Apache-2.0
- **Stars**: 49,283
- **Canonical Web Page**: https://builderthread.dev/skill/alibaba/open-code-review/code-review
- **Parent Topic**: [security](https://builderthread.dev/skill/for/security.md)
- **Last Verified**: 2026-11-02
- **Supported Coding Agents**: Claude Code, Cursor, Codex, Windsurf

## Description
Automated code review pipeline catching SQL injections, insecure session handling, uncaught promises, and missing authorization checks.

## Install Command
```bash
npx skills add alibaba/open-code-review --skill code-review
```

## When to Use This Skill
- Running pre-merge code reviews for security vulnerabilities and race conditions
- Catching null pointer dereferences and unhandled exception paths
- Enforcing defensive programming standards across backend pull requests

## Files Inside Package
- `SKILL.md`
- `rules/security.md`
- `rules/performance.md`

---

## Production Grade Starter Repo

Pre built starter repo with auth, databases, backend, and AI integrations already configured based on your tech stack of choice (worth $200+ and saves you 30+ hours of configuration).

- Supported languages: TypeScript, React Native, Rust, Go, Python, Java
- Frameworks: 18+ Frontend frameworks, 45+ Backend frameworks
- Start now: https://builderthread.dev/auth/signup