Code Review Checklist
Structured PR review checklist: security, performance, correctness, severity-labeled.
Test report
- Verdict
- Tested · Works
- Score
- Tested
- Jul 14, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Aug 10, 2026 · e64fb61
Ran it against a two-endpoint Express snippet: a naive pass caught only the obvious SQL-injection string interpolation, but the checklist surfaced four Critical findings the naive pass missed entirely — an IDOR on the orders route, an unauthenticated password-reset endpoint, plaintext password storage, and no rate limiting.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 5/5
- Triggers reliably 5/5
- Output vs. baseline 9/10
- Docs & honesty 5/5
What Code Review Checklist does
A systematic PR-review methodology covering security, performance, correctness, maintainability, and testing, each with a concrete checklist (SQL injection, IDOR, race conditions, N+1 queries, memory leaks, and more), a three-pass review process, and Critical/Major/Minor/Nitpick severity labels so authors know exactly what blocks merge. Use when reviewing pull requests, setting team review standards, or training new reviewers on what to look for.
How to install Code Review Checklist
git clone https://github.com/LeoYeAI/openclaw-master-skills
cd openclaw-master-skills
mkdir -p ~/.claude/skills
cp -r skills/code-review ~/.claude/skills/code-review-checklist
Skills live in ~/.claude/skills/ (global) or .claude/skills/
(per-project). Restart Claude Code after installing.
Commands — how to trigger Code Review Checklist
-
/code-review-checklistStructured PR review checklist: security, performance, correctness, severity-labeled.
It also activates on plain-language prompts like these:
-
Review this PR for boundary conditions and error paths -
Check this diff for concurrency bugs, not style nits -
Run a structured correctness review on this pull request
Appears in
Frequently asked questions
- Is the Code Review Checklist skill free?
- Yes. The skill itself is free from LeoYeAI/openclaw-master-skills. SkillProof publishes the install command and an independent test verdict at no cost.
- Does Code Review Checklist work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 14, 2026. Verdict: Tested · Works. Ran it against a two-endpoint Express snippet: a naive pass caught only the obvious SQL-injection string interpolation, but the checklist surfaced four Critical findings the naive pass missed entirely — an IDOR on the orders route, an unauthenticated password-reset endpoint, plaintext password storage, and no rate limiting.
- What is the Code Review Checklist SkillProof Score?
- 9.6/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 9/10, docs & honesty 5/5.
- How do I install Code Review Checklist?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use Code Review Checklist with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.